
Binance Hacker Splits Stolen XRP Across Six New Wallets, Sources Differ on Amount
The attacker behind a Binance-linked XRP theft moved the funds into six new wallets, with no outgoing payments observed from those recipients so far. Reports differ on the amount, with The Defiant citing $292 million and 99Bitcoins citing 233.46 million XRP, and native XRP cannot be frozen by Ripple.
Written by CoinArticle’s AI Newsroom · from 2 cited sources. How we work
Funds Moved to Six New Wallets
The attacker who took XRP from Binance split the stolen stash across six new wallets, according to on-chain activity reported by both The Defiant and 99Bitcoins. The coins had sat untouched for more than three days before the transfers began.
The two outlets disagree on the size of the haul. The Defiant put the total at $292 million, while 99Bitcoins reported 233.46 million XRP. The gap reflects how the figure is converted and which XRP balance is counted, and neither source in the material provided a reconciliation. Readers should treat the dollar value as dependent on the XRP price used at the time of measurement.
Why Freezing Is Difficult
The Defiant noted that none of the six recipient wallets had made an outgoing payment as of its reporting. The same report stressed a structural constraint: native XRP cannot be frozen by Ripple, the company associated with the XRP Ledger's development. That leaves centralized exchanges as the most likely point where the funds could be intercepted if they are deposited to a platform.
Market Backdrop
99Bitcoins tied the transfers to the same week in which, it said, US spot XRP ETFs were the only crypto funds to record inflows. The article framed the theft and the fund flows as coincident rather than causally linked, and the material provided does not establish any connection between them. The report also raised the question of whether XRP could hold the $1.24 level, though no price analysis in the sources supports a directional call.
What Remains Unknown
The available reporting does not identify the attacker or confirm the exact date and method of the original breach at Binance. Both sources describe on-chain movements, which are verifiable through public ledger explorers, but the material does not include an official statement from Binance or Ripple on the incident.
Why It Matters
For Traders
Any XRP exchange deposit from these six wallets would be a meaningful signal of possible sell pressure, so watch for transfers to centralized venues.
For Investors
A large theft that native XRP cannot be frozen to reverse highlights custody and exchange-security risk as a recurring feature of the asset's market structure.
For Builders
Exchange and wallet teams should review withdrawal monitoring and deposit screening, since on-chain freezing is not available for native XRP.
This article is for information only and is not financial advice. Read the full disclaimer.





