KuCoin Maintains Wallet Freeze as Hackers Begin Laundering Stolen Crypto

The exchange's weekend thieves appear to be searching for buyers of their $281 million in stolen crypto.

AccessTimeIconSep 29, 2020 at 3:52 p.m. UTC
Updated Sep 14, 2021 at 10:02 a.m. UTC
Consensus 2023 Logo
Join the most important conversation in crypto and Web3 taking place in Austin, Texas, April 26-28.
Consensus 2023 Logo
Join the most important conversation in crypto and Web3 taking place in Austin, Texas, April 26-28.

KuCoin left its customers' accounts on lockdown Tuesday as the exchange's weekend hackers continued to slosh around millions of dollars in stolen cryptocurrency.

  • Transaction tracing twitter account Whale Alert flagged 18.4 million XRP tokens ($4.5 million) flowing into a "hack wallet" on Tuesday morning eastern time.
  • Hackers routed 17 million of that haul into a sub-wallet less than an hour later. Shortly after that, four batches of roughly four million tokens apiece flowed into yet more sub-wallets, where they appeared to sit at press time.
  • The XRP is only a drop of the $281 million in cryptocurrencies (especially bitcoin, Tron tokens, Stellar tokens and Ethereum tokens) that tracing firm Elliptic estimated was stolen from KuCoin over the weekend.
  • Ethereum-based tokens in particular dominate the haul. Hackers made off with $150 million total in tether, chainlink and other Ethereum-based tokens, Elliptic said.
  • The hackers have largely failed to sell those tokens on closely guarded centralized exchanges which quickly flag and often block hacked funds.
  • Still, by Monday, Elliptic said that hackers had already flipped millions of stolen tokens for $7.5 million in ethereum (ETH) on decentralized exchanges (DEX) Kyber Network and Uniswap.
  • Elliptic, which is now eyeing that ETH, said in its Monday blog post that the laundering will likely continue on DEXs.
  • KuCoin maintained its post-hack deposit and withdrawal freeze well into Tuesday. It began cancelling previously scheduled programming (including a trading competition) as a result.


Please note that our privacy policy, terms of use, cookies, and do not sell my personal information has been updated.

The leader in news and information on cryptocurrency, digital assets and the future of money, CoinDesk is a media outlet that strives for the highest journalistic standards and abides by a strict set of editorial policies. CoinDesk is an independent operating subsidiary of Digital Currency Group, which invests in cryptocurrencies and blockchain startups. As part of their compensation, certain CoinDesk employees, including editorial employees, may receive exposure to DCG equity in the form of stock appreciation rights, which vest over a multi-year period. CoinDesk journalists are not allowed to purchase stock outright in DCG.

Learn more about Consensus 2023, CoinDesk’s longest-running and most influential event that brings together all sides of crypto, blockchain and Web3. Head to consensus.coindesk.com to register and buy your pass now.