FTX Exploiter Transfers $200M in Ether to 12 Crypto Wallets

The exploiter had previously drained hundreds of millions of digital assets from FTX on the same day as the embattled crypto exchange filed for bankruptcy protection.

AccessTimeIconNov 21, 2022 at 5:36 p.m. UTC
Updated Nov 21, 2022 at 9:25 p.m. UTC
10 Years of Decentralizing the Future
May 29-31, 2024 - Austin, TexasThe biggest and most established global event for everything crypto, blockchain and Web3.Register Now

Blockchain data from Etherscan shows that a crypto account associated with the FTX exploiter moved a total of 180,000 ether (ETH) – worth roughly $200 million at current prices – to 12 crypto wallets Monday, with each wallet receiving 15,000 ETH over a period of minutes.

The FTX hacker transferred 180,000 ETH to twelve separate crypto accounts Monday. (Etherscan)
The FTX hacker transferred 180,000 ETH to twelve separate crypto accounts Monday. (Etherscan)

Failed crypto exchange FTX suffered an exploit on Nov. 11 – the same day it filed for bankruptcy protection in the U.S. – enduring about $600 million of unauthorized withdrawals.

Blockchain experts argued that the looter was likely an insider who had access to the exchange's cold wallets. The security team of crypto exchange Kraken said that they knew the identity of the exploiter, because they used their personal verified account to pay for transaction fees.

Blockchain intelligence firm Arkham Intelligence said the FTX exploiter is in a panic, and has lost a substantial amount of money in slippage and conversion fees attempting to cash out.

The looter's move on Monday follows Sunday's conversion of funds to renBTC (a version of bitcoin on the Ren bridge). Ren is a blockchain bridge with close ties to Alameda Research, the corporate sibling of FTX. According to a report by blockchain analysis firm Elliptic, the Ren bridge has been previously used for laundering at least half a billion dollars of stolen funds.


Please note that our privacy policy, terms of use, cookies, and do not sell my personal information has been updated.

CoinDesk is an award-winning media outlet that covers the cryptocurrency industry. Its journalists abide by a strict set of editorial policies. In November 2023, CoinDesk was acquired by the Bullish group, owner of Bullish, a regulated, digital assets exchange. The Bullish group is majority-owned by Block.one; both companies have interests in a variety of blockchain and digital asset businesses and significant holdings of digital assets, including bitcoin. CoinDesk operates as an independent subsidiary with an editorial committee to protect journalistic independence. CoinDesk employees, including journalists, may receive options in the Bullish group as part of their compensation.

Krisztian  Sandor

Krisztian Sandor is a reporter on the U.S. markets team focusing on stablecoins and institutional investment. He holds BTC and ETH.

Learn more about Consensus 2024, CoinDesk's longest-running and most influential event that brings together all sides of crypto, blockchain and Web3. Head to consensus.coindesk.com to register and buy your pass now.