Elliptic Detects Initial Bitcoin Mixing Linked to Binance Exploit

Blockchain analytics firm Elliptic identified the initial use of $BTC mixing services to launder proceeds originating from the Binance security incident, according to findings published by the company ¹. The activity marks the first observed deployment of obfuscation tools specifically targeting the Bitcoin-denominated funds derived from the breach ¹.

Through its tracing efforts, the analytics provider mapped out roughly 12,000 distinct digital wallets spanning 11 different blockchains that have received or handled proceeds tied to the exploit ¹. Elliptic calculated the remaining balances held across these tracked, linked addresses at $3.24 billion ¹.

Multi-Chain Distribution and Asset Movements

The detection follows wider movements of funds across the broader crypto ecosystem. The reporting also references data from Chainalysis documenting separate laundering routes related to the Binance incident, including the transfer of proceeds to the Solana network after actors drained $500 million on Tron ¹. Additional tracked movements include an attacker dividing $292 million in XRP across six individual wallets ¹. Meanwhile, public data tracked across exchanges indicated that Binance experienced a net outflow of $4.54 billion as competing monitored platforms registered $564 million in gains ¹.

At the time of writing, Bitcoin was trading at $77,784, down 0.1% over 24 hours amid broader market caution. As investigations into the incident continue alongside earlier inquiries into the largest crypto heist, analytics firms continue to document the dispersal of the remaining $3.24 billion distributed across the multi-chain cluster ¹.