Key facts
- Elliptic said hackers swapped about $50 million of stolen XRP, mostly into Bitcoin.
- Elliptic estimated about $3.11B of the $6.43B stolen from Binance remains unlaundered.
About $3.11 billion of the $6.43 billion stolen from Binance on October 29, 2026 remains in addresses linked to the theft, blockchain analytics firm Elliptic said in a report updated on November 6. Elliptic said $2.85 billion has been frozen or seized, mostly stablecoins Tether and Circle froze within an hour.

Elliptic's estimate that about $3.11B of the $6.43B Binance haul remains unlaundered leaves a large pool of stolen ETH and Bitcoin that Elliptic said is very likely still held by North Korea. The $50 million XRP swap into Bitcoin shows the stolen tokens being converted rather than left in place.
Elliptic said on November 6, 2026 that hackers who stole funds from Binance swapped about $50 million of stolen XRP, mostly into Bitcoin. The blockchain analytics firm described the swap as a conversion of the stolen tokens rather than a sale for cash.
Elliptic also said about $3.11B of the $6.43B stolen from Binance remains unlaundered, mostly in ETH and Bitcoin, and is very likely still held by North Korea. The firm gave no further detail on how the XRP was exchanged or where the Bitcoin went.
Binance did not comment on the Elliptic findings in the report. The report did not give a date for the original Binance hack or name the hackers beyond the North Korea reference.
Pick the topics you care about. Get only what matters, on your cadence.