On Nov. 5, Bloomberg reported that Chainalysis had traced hundreds of thousands of dollars from the Binance theft into Chinese money-laundering networks. The reported trace represented a fraction of the roughly $6.3 billion theft. 20minutos dated the attack to Oct. 29, 2026.

A route spanning multiple blockchains can still account for only a fraction of a theft.

Chainalysis traced a fraction of the stolen funds

Bloomberg attributed the trace to Chainalysis and reported that the assets moved through thousands of wallets and multiple blockchains in an effort to obscure their origins. The account describes a complex path for some of the stolen funds, rather than the full value taken from Binance.

NeoTeo previously covered a reported on-chain link between the Binance and Bitget thefts in its earlier account of that connection. This report concerns funds traced into Chinese money-laundering networks.

A separate report described activity from Tron to Solana

The Defiant’s Nov. 1 report attributed to Chainalysis a separate route in which laundering operators began moving onto Solana after about $500 million was drained from Tron staging wallets. The report said the operation involved more than 1,000 addresses and over 3,000 deposits before funds dispersed across chains.

Authorities reportedly identified TraderTraitor

Bloomberg reported that U.S. authorities identified the hackers as members of North Korea’s TraderTraitor group. Futurism reported that Pyongyang denied involvement.