FTX Exploiter Transfers $200M in Ether to 12 Crypto Wallets

The exploiter had previously drained hundreds of millions of digital assets from FTX on the same day as the embattled crypto exchange filed for bankruptcy protection.

AccessTimeIconNov 21, 2022 at 5:36 p.m. UTC
Updated Nov 21, 2022 at 9:25 p.m. UTC

Blockchain data from Etherscan shows that a crypto account associated with the FTX exploiter moved a total of 180,000 ether (ETH) – worth roughly $200 million at current prices – to 12 crypto wallets Monday, with each wallet receiving 15,000 ETH over a period of minutes.

CoinDesk - Unknown
The FTX hacker transferred 180,000 ETH to twelve separate crypto accounts Monday. (Etherscan)

Failed crypto exchange FTX suffered an exploit on Nov. 11 – the same day it filed for bankruptcy protection in the U.S. – enduring about $600 million of unauthorized withdrawals.

Blockchain experts argued that the looter was likely an insider who had access to the exchange's cold wallets. The security team of crypto exchange Kraken said that they knew the identity of the exploiter, because they used their personal verified account to pay for transaction fees.

Blockchain intelligence firm Arkham Intelligence said the FTX exploiter is in a panic, and has lost a substantial amount of money in slippage and conversion fees attempting to cash out.

The looter's move on Monday follows Sunday's conversion of funds to renBTC (a version of bitcoin on the Ren bridge). Ren is a blockchain bridge with close ties to Alameda Research, the corporate sibling of FTX. According to a report by blockchain analysis firm Elliptic, the Ren bridge has been previously used for laundering at least half a billion dollars of stolen funds.


Please note that our privacy policy, terms of use, cookies, and do not sell my personal information has been updated.

The leader in news and information on cryptocurrency, digital assets and the future of money, CoinDesk is a media outlet that strives for the highest journalistic standards and abides by a strict set of editorial policies. CoinDesk is an independent operating subsidiary of Digital Currency Group, which invests in cryptocurrencies and blockchain startups. As part of their compensation, certain CoinDesk employees, including editorial employees, may receive exposure to DCG equity in the form of stock appreciation rights, which vest over a multi-year period. CoinDesk journalists are not allowed to purchase stock outright in DCG.

CoinDesk - Unknown

Krisztian Sandor is a reporter on the U.S. markets team focusing on stablecoins and institutional investment. He holds BTC and ETH.

Learn more about Consensus 2024, CoinDesk’s longest-running and most influential event that brings together all sides of crypto, blockchain and Web3. Head to consensus.coindesk.com to register and buy your pass now.