On-chain sleuths discovered that the FTX exploiter sent $4.1 million worth of crypto to the OKX exchange.

In a series of tweets on Tuesday, blockchain analysts ZachXBT and Nick bax.eth shared their analysis of the FTX attackers on-chain movements.

The analysts traced the FTX attacker’s deposits to ChipMixer – a privacy service designed to obfuscate transactions – and found that 225 Bitcoin worth $4.1 million was sent to OKX. 


The attacker reportedly began depositing Bitcoin into ChipMixer on Nov. 20 after using the RenBTC bridge to convert the stolen crypto to BTC

At the time, blockchain intelligence firm Chainalysis reported that the hacker had sent $29.3 million through the RenBTC bridge and that the hacker’s actions were indicative of someone preparing to cash out. Chainalysis cautioned exchanges to be on high alert in case such an attempt was made. 

OKX Director Lennix Lai responded to news that funds were sent to the exchange, saying that OKX executives were investigating the situation. 

Crypto reporter Colin Wu reported that OKX has now frozen the account in question. 

Former FTX CEO Sam Bankman-Fried shared his thoughts on the hack in an interview with Celsius creditor Tiffany Fong on Tuesday. Bankman-Fried said he had a “pretty decent sense” that the person behind it was either an employee or someone involved in malware on an ex-employees computer.