How much — by source
Totals differ by source and by the prices used.
Elliptic$6.43B
Chainalysis$6.4B
TRM Labs$6.36B
Binance$6.3B
Bitquery$6.3B
Glassnode$5.3B
crypto leveraged liquidations$1.57B
What was taken
By chain
Per-chain figures: mostly one tracer (trmlabs.com) — preliminary.
Tap a block for the amount in coins.
- Ethereum$3.79B200,630 ETH · trmlabs.com ↗
- Bitcoin$1.47B18,270 BTC · trmlabs.com ↗
- Tron$628M46.4M TRX · trmlabs.com ↗
- XRP Ledger$296M233M XRP · trmlabs.com ↗
- Solana$96M970,500 SOL · trmlabs.com ↗
- Arbitrum$30.8M8,425 ETH · tozvan.com ↗ · forum.arbitrum.foundation ↗
- Avalanche$28M1.81M AVAX · trmlabs.com ↗ · tozvan.com ↗
- Polygon$10Mtrmlabs.com ↗
- Optimism$4.6Mtozvan.com ↗
- Base$2.8Mtozvan.com ↗
By currency
| Currency | Amount | In dollars |
|---|---|---|
| BTCtrmlabs.com ↗ | 18,270 BTC | $1.47B |
| USDCtrmlabs.com ↗ | 823M USDC | $823M |
| ETHtrmlabs.com ↗ · bitquery.io ↗ | 200,630 ETH | $464M |
| XRPtrmlabs.com ↗ | 233M XRP | $296M |
| SOLtrmlabs.com ↗ | 970,500 SOL | $96M |
| USD1trmlabs.com ↗ | 27.8M USD1 | $27.8M |
| TRXtrmlabs.com ↗ · bitquery.io ↗ | 46.4M TRX | $16M |
| OPtozvan.com ↗ | 44.2M OP | $4.6M |
| VIRTUALtozvan.com ↗ | 4.74M VIRTUAL | $2.8M |
| ARBforum.arbitrum.foundation ↗ | 74.6M ARB | |
| Avalanche USDTtrmlabs.com ↗ | 8.4M USDT | |
| AVAXtozvan.com ↗ | 1.81M AVAX | |
| Ethereum USDTtrmlabs.com ↗ | 1.88B USDT | |
| Polygon USDT0trmlabs.com ↗ | 6.2M USDT0 | |
| RLUSDtrmlabs.com ↗ | 88.5M RLUSD | |
| Tron USDTtrmlabs.com ↗ | 613M USDT |
The defenders
Frozen is not returned.
Elliptic
$2.84BChainalysis
$2.8BTether
$1.77B1.77B USDT
Tether: first freeze on Ethereum
Circle
$825M825M USDC
Circle: first freeze on Ethereum
Ripple
$40.5M40.5M RLUSD
Ripple freezes RLUSD
Arbitrum Security Council
$30M8,425 ETH · 74.6M ARB
Arbitrum: emergency action
World Liberty Financial
$27.8M27.8M USD1
World Liberty freezes USD1
Aave
- V3
- 175 markets frozen · 16 networks affected
- V4
- 117 markets frozen · 4 networks affected
- Aave
- 292 markets frozen
Frozen in total — by source
Binance · verified$3Bbinance.com ↗
Elliptic · verified$2.84Belliptic.co ↗
Binance · verified$2.54BOct 29 · 23:35 UTC · trmlabs.com ↗
Bitquery · independently traced$2.7BOct 30 · bitquery.io ↗
TRM Labs · independently traced$2.7BOct 30 · 00:30 UTC · trmlabs.com ↗
Binance · verified$3BOct 30 · 02:23 UTC · binance.com ↗
The night — timeline
- Tether: first freeze on Ethereumtrmlabs.com ↗
- Circle: first freeze on Ethereumtrmlabs.com ↗
- Ripple freezes RLUSDtrmlabs.com ↗
- World Liberty freezes USD1trmlabs.com ↗
- Arbitrum: emergency actionforum.arbitrum.foundation ↗
- Chainalysis publishes its estimate: $6.4Breuters.com ↗
- TRM Labs publishes its estimate: $6.36Btrmlabs.com ↗
- Binance publishes its estimate: $6.3Bbinance.com ↗
Still with the attacker
$3.2Bstill held by the attackerOct 30 · 06:43 UTC · bitquery.io ↗
18,270 BTCstill held by the attackerOct 30 · 06:43 UTC · bitquery.io ↗
508,621 ETHstill held by the attackerOct 30 · 06:43 UTC · bitquery.io ↗
729M USDTUSDT swapped before it could be frozenbitquery.io ↗
The attacker’s position on Aave
60M USDTsupplied as collateralgovernance.aave.com ↗
19,762 WETHborrowedgovernance.aave.com ↗
Markets
Our stories

Clues point to North Korean hackers in a massive crypto theft, but public proof remains out of reach.

A single digital intrusion bypassed security across multiple payment networks.

Stopping billions in stolen digital coins halts the thief but leaves victims waiting on complex legal returns.

Visa reported surging payment volumes in dollar-pegged tokens just before the world's biggest crypto exchange suffered a record-scale security incident.
