On-chain sleuths discovered that the FTX exploiter sent $4.1 million worth of crypto to the OKX exchange.
In a series of tweets on Tuesday, blockchain analysts ZachXBT and Nick bax.eth shared their analysis of the FTX attackers on-chain movements.
The analysts traced the FTX attacker’s deposits to ChipMixer – a privacy service designed to obfuscate transactions – and found that 225 Bitcoin worth $4.1 million was sent to OKX.
1/ Myself and @bax1337 spent this past weekend looking into the FTX attacker’s deposits to ChipMixer.
It appears they’ve likely been transferring a portion of the stolen FTX funds to OKX after withdrawing from CM
So far we’ve accounted for at least $4.1m (255 BTC) sent to OKX pic.twitter.com/C46JZWtktn
— ZachXBT (@zachxbt) November 29, 2022
3/ For those unfamiliar with CM here’s what it looks like when using the mixer. pic.twitter.com/hen8dRJI0F
— ZachXBT (@zachxbt) November 29, 2022
The attacker reportedly began depositing Bitcoin into ChipMixer on Nov. 20 after using the RenBTC bridge to convert the stolen crypto to BTC
At the time, blockchain intelligence firm Chainalysis reported that the hacker had sent $29.3 million through the RenBTC bridge and that the hacker’s actions were indicative of someone preparing to cash out. Chainalysis cautioned exchanges to be on high alert in case such an attempt was made.
OKX Director Lennix Lai responded to news that funds were sent to the exchange, saying that OKX executives were investigating the situation.
#OKX is aware of the situation, and the team is investigating the wallet flow.
— Lennix Lai (@LennixOKX) November 29, 2022
Crypto reporter Colin Wu reported that OKX has now frozen the account in question.
Former FTX CEO Sam Bankman-Fried shared his thoughts on the hack in an interview with Celsius creditor Tiffany Fong on Tuesday. Bankman-Fried said he had a “pretty decent sense” that the person behind it was either an employee or someone involved in malware on an ex-employees computer.
