11th November, 2026
By Shubhii Verma
Blockchain analytics firm Chainalysis has traced hundreds of thousands of dollars in cryptocurrency stolen from Binance to Chinese over-the-counter (OTC) networks, identifying another route allegedly used by hackers to convert stolen assets into spendable funds.
The transfers are a small fraction of the $6.3 billion October 29 theft. Nearly $1 billion in stolen assets has reportedly entered wider laundering channels.
How Stolen Binance Funds Moved Across TRON and Solana
Chainalysis also tracked approximately $500 million moving through the TRON blockchain. The funds were distributed across more than 1,000 wallet addresses before being transferred onward to Ethereum and Bitcoin networks. Investigators are examining how attackers fragmented assets to complicate tracing.
A subsequent phase involved Solana, following transfers through intermediary TRON wallets. The investigation points to a multi-chain operation involving wallet fragmentation and Chinese OTC networks.
Chinese OTC Networks Linked to Stolen Crypto Transfers
China-linked transfers may show how hackers seek to convert digital assets into spendable value. OTC platforms facilitate large transactions outside conventional exchange order books, but funds passing through a network do not prove every intermediary knowingly participated in laundering.
Investigators continue tracking assets from the theft. Binance has said it would reimburse affected customers.
Blockwind News ANALYSIS
The latest findings highlight that recovering stolen cryptocurrency is not simply a matter of identifying the original wallets. Criminal groups can divide funds, move them across blockchains and use intermediaries to create distance between the theft and eventual cash-out points. Each additional layer increases the complexity of investigations and the need for cooperation between analytics firms, exchanges and law enforcement agencies.
The reported Chinese OTC connections are significant because converting crypto into usable money is often a critical stage in laundering. Yet investigators must distinguish between tracing funds to a service and proving that its operators knowingly facilitated criminal activity. Attribution requires evidence beyond wallet movements.
The scale also matters. Hundreds of thousands of dollars reaching Chinese networks is a limited share of the $6.3 billion theft, while the reported $500 million TRON route demonstrates the much broader movement under scrutiny. These figures describe different parts of the investigation and should not be treated as interchangeable.
For the industry, the case reinforces the importance of real-time monitoring, cross-chain analytics and rapid freezing procedures where legally permitted. Blockchain transparency can expose transaction trails, but effective recovery depends on how quickly platforms and authorities act before funds disappear into less accessible channels.
Such coordination can identify conversion points before funds move beyond regulated platforms or become harder to recover.
