
Binance Hack Proceeds Split Between Bitcoin and XRP, With 233.46M XRP Held Unspent
On-chain tracing indicates the hacker's funds are split across Bitcoin and XRP, with the XRP holdings sitting in a single account and the Bitcoin spread across 19 addresses. Investigators can follow the movements, but neither asset gives the issuer a practical way to freeze the funds.
Written by CoinArticle’s AI Newsroom · from 2 cited sources. How we work
What the Ledgers Show
According to reporting from The Defiant, the stolen Binance funds remain largely unspent, with Bitcoin dispersed across 19 addresses and 233.46 million XRP held in one account. 99Bitcoins, citing blockchain analytics firm Arkham, reported that the hacker's first $300 million moved out in XRP and that the 233.46 million XRP balance remains untouched in one wallet. Both outlets describe the same XRP account, which indicates the sources are tracking the same on-chain holding.
Where the Sources Diverge
The two sources differ on how the theft began. 99Bitcoins describes the XRP drain as the opening move of a $6.36 billion theft in which five Binance accounts were emptied. The Defiant's summary does not specify the sequence of transfers or the total value taken, so the claim that XRP was the first asset moved rests on Arkham's attribution as relayed by 99Bitcoins. Readers should treat the ordering and the $6.36 billion total as single-source figures until independent tracing confirms them.
Recovery Constraints
The central point common to both reports is that neither asset offers a straightforward recovery path through the issuer. Bitcoin has no issuer with freeze authority, so once coins move to addresses the holder controls, tracing does not reverse the transfers. XRP is issued by Ripple, and the sources note that the issuer cannot freeze the 233.46 million XRP in the account. Investigators therefore have a visible trail to follow, but the stolen balances remain movable by whoever controls the keys.
Why It Matters
For Traders
Unspent XRP and Bitcoin balances controlled by the attacker could be moved at any time, so exposure to short-term price action around exchange-linked assets may warrant attention to on-chain alerts.
For Investors
The absence of an issuer freeze mechanism for XRP and the dispersal of Bitcoin across addresses highlight recovery limits that bear on custody risk at centralized exchanges.
For Builders
Teams building custody or exchange infrastructure should note that issuer-level freeze options do not exist for Bitcoin and are limited for XRP, so hot-wallet design must assume irreversible loss.
This article is for information only and is not financial advice. Read the full disclaimer.



