Skip to content
$BTC$77,392+0.0%$ETH$2,248+0.8%$SOL$95.79−0.9%$XRP$1.25−0.1%$TON$1.78+52.4%MCap$2.61T−0.9%BTC.D59.4%Fear&Greed30 FearGas0.06 gwei·1 sat/vBNews mood14% bullish
Basis Desk

New from Basis Desk: free Telegram proxies for places where Telegram is blocked or slowed down.Connect in one tap →

Security & Hacks · 1 min read

Chainalysis Identifies DeFi Receipt-Token Launder Route in Binance Exploit

Blockchain intelligence reveals attackers moved USDT through JustLend receipt tokens to transfer and redeem assets across distinct wallets.

Editorial oversight: Julian Mercer, Chief Editor
Bearish
$USDT $0.9989 +0.0% $BTC $77,392 +0.0% $ETH $2,248 +0.8%

At a glance

What happened
Chainalysis flagged onchain records showing funds from the Binance hack deposited as USDT into JustLend and redeemed as jUSDT across wallets.
Why it matters
The tactic illustrates how attackers deploy lending protocol receipt tokens to obfuscate transaction trails and bypass traditional wallet monitors.
Who is affected
Binance, JustLend protocol participants, and digital asset compliance teams.
What's next
No next step announced.
Primary source
thedefiant.io: Chainalysis Flags DeFi Receipt-Token Route in Binance Hack

Key points

  • Chainalysis flagged a DeFi receipt-token transfer method used in the Binance breach 1.
  • Onchain data showed USDT deposited into JustLend, transferred as jUSDT, and redeemed by a different wallet 1.
  • The laundering route highlights attempts to obscure fund flows through lending protocol receipt tokens 1.

Blockchain analytics firm Chainalysis has identified the use of decentralized finance receipt tokens to obscure fund movements tied to the Binance hack 1. Onchain analysis tracked by the firm revealed a pattern involving $USDT deposits into the JustLend protocol, where assets were converted into yield-bearing receipt tokens and transferred to separate addresses 1.

According to findings reported from Chainalysis, the transaction path demonstrates how an attacker deposited USDT into JustLend, generated corresponding jUSDT receipt tokens, transferred those tokens to another wallet, and subsequently redeemed the underlying stablecoins 1. This receipt-token mechanism enabled the redistribution of illicit capital across independent wallet addresses within DeFi liquidity pools 1.

Broadening Fallout from Binance Incident

The tracing observations add to expanding scrutiny surrounding unauthorized outflows from Binance, where industry discussions have centered on wallet permissions, account delegation mechanisms, and potential protocol vulnerabilities 1. Earlier coverage of the security breach noted related assessments regarding signing compromises and account controls, including past reporting on how the Binance hack involved wallet permission bypasses 1.

At the time of writing, wider market conditions reflect ongoing caution, with Bitcoin ($BTC) trading near $77,468, Ethereum ($ETH) at $2,247, and USDT holding at $0.9989 as tracking efforts assess the destination of diverted capital across lending markets 1. Neither Chainalysis nor Binance has released a concluding timeline for asset recovery tied to the flagged JustLend transfers 1.

Sources

  1. [1] Chainalysis Flags DeFi Receipt-Token Route in Binance Hack — thedefiant.io, October 31, 2026

Written by Basis Desk's newsroom system from the primary sources above and machine-verified against them before publication. Market figures marked "at the time of writing" come from live exchange data. Report an error: corrections@basisdesk.news · corrections policy.

Community read
How do you read this story for the assets involved? One vote a day, anonymous.
Be the first to vote
Share X Telegram Bluesky Markdown

The Daily Brief, in your inbox at 07:00 ET

Five stories, the numbers that moved, what to watch. Three minutes. No hype, no advice, unsubscribe in one click.

Not financial advice. Basis Desk publishes information, not recommendations. Crypto assets are volatile and you can lose what you invest.