Binance hot wallets drained.

What the attacker holds, and what is frozen

Every token across all tracked attacker wallets, sized by USD value. Ice blue shows the frozen part.

How much of each token the attacker owns

Every token in the attacker wallets, ranked by the share of its circulating supply they hold.

Follow the money

Each square is a wallet, sized by what it holds now (or what passed through, for empty hops). Lines are transfers, sized by USD. Hover for details, click to open the wallet in Octav.

What the attacker is doing in DeFi

Open lending positions on tracked wallets, read from the Octav API. Health factor below 1.0 means the position can be liquidated.

Every wallet we are tracking

Holding wallets still have funds. Hops passed funds on and are nearly empty. Balances on every chain, Tron included, come from the Octav API.

How it unfolded