FTX Exploiter Executes Ongoing Funds Exodus, Moves $17 Million In ETH In One Day
According to an on-chain report on Saturday, September 30, an address associated with the FTX exploiter became active for the first time in 10 months. As earlier reported, some 5,000 ETH (equivalent to $8.2 million) was...
Archive context
Older archive item. Useful for background and entity history, but not a fresh market-moving signal.
According to an on-chain report on Saturday, September 30, an address associated with the FTX exploiter became active for the first time in 10 months. As earlier reported, some 5,000 ETH (equivalent to $8.2 million) was transferred from the flagged address (identified as 0x3e9) to new addresses on Saturday.
However, in the latest development, blockchain data tracker Spot On Chain revealed that the FTX exploiter has moved more than $17 million worth of Ether tokens in the past 24 hours.
FTX Exploiter To Keep Moving Stolen Funds, Spot On Chain SpeculatesIn one of the most significant exploits in the crypto space, the now-defunct FTX exchange fell victim to a hack a few hours after declaring bankruptcy, leading to a loss of more than $600 million.
According to an on-chain revelation, the exploiter has been moving huge chunks of their loot in the past 24 hours. The transferred funds have reached a total of 10,250 ETH (worth roughly $17.2 million), spread across five addresses.
A breakdown by Spot On Chain shows that a significant 7,749 ETH (equivalent to about $13 million) was moved to the Thorchain router and Railgun contract. These two decentralized finance (DeFi) protocols are renowned for their privacy-focused features.
Within the past day, the FTX exploiter has executed swap transactions involving 2,500 ETH (worth approximately $4.19 million). These funds were converted to 153.4 tBTC (an ERC-20 token standard for Bitcoin) at an average price of $27,281.
FTX Exploiter 0x3e9 has transferred out a total of 10,250 $ETH ($17.1M) via 5 addresses over the past 24 hours:
– sent 7,749 $ETH ($13M) to the Thorchain router and Railgun contract
– swapped 2,500 $ETH ($4.19M) to 153.4 $tBTC at $27,281 on avg
Notably, the address has been… https://t.co/xzmDz8Vmma pic.twitter.com/4Ykp0zih6G
— Spot On Chain (@spotonchain) October 1, 2023
The recent movement of funds by the attacker is believed to be triggered by the highly likely approval of Ether futures ETFs in the US. However, there has been no substantial evidence to back up these connections.
There have been speculations that the exploiter might be looking to dump their tokens should the ETH price rally after futures ETFs are greenlighted.
In any case, spectators will probably keep an eye on the address’ activity, especially after Spot On Chain suggested the exploiter may keep transferring ETH.
Ethereum Price OverviewThe Ethereum price showed good strength to end September after largely struggling throughout the month. The cryptocurrency has made a positive start to October, approaching the psychological $1,700 level with a 0.6% rise in the past day.
The value of ETH has jumped by nearly 6% in the past week, reflecting positive signs of recovery. According to data from CoinGecko, the cryptocurrency has experienced a nearly 4% decline in daily trading volume, representing a recent fall in market activity.
Nevertheless, Ethereum remains the second-largest cryptocurrency, with a market cap exceeding $200 billion.
Why this matters
This ethereum story adds another data point to the current market tape and is useful when read alongside nearby source coverage.
Original source
Read on NewsBTCRelated market context
Tether Freezes $1.45M in THORChain USDT Vaults, Then Reverses Blacklist Hours Later
Key Takeaways: The amount of about $1.45 million in USDT was temporarily frozen in THORChain vault addresses. According to THORCha...
Bitcoin hedge funds face a liquidation trap when their collateral is split across markets
Here's a hypothetical situation: a hedge fund is making money, but one of its exchanges is about to liquidate its position anyway....
Solana sandwich bots took $29.7 million before costs, mostly targeting Pump.fun
Sandwich bots extracted about $29.7 million before costs from Solana trades over an 11-month period, according to blockchain data...
Stealing $1.5B in crypto is easy, cashing out is the trap
North Korean hackers stole around $1.5 billion from Bybit in February 2025. While the hack itself has been widely covered and anal...
Ledger wallet implant exposes a gap in its authenticity check
Ledger has confirmed an unauthorized hardware implant in one affected customer's wallet as independent investigators estimate $93....
Some Aave loans sit near liquidation with collateral that can take hours to cash out
Some Aave loans backed by yield-bearing collateral had narrow liquidation buffers in LlamaRisk’s Oct. 9 snapshots. Every top PT-AU...