Millions in Ether Tied to FTX Account Drainer on The Move

Around 2,500 ether (ETH), worth just over $4 million, tied to last year’s apparent exploit of the FTX exchange started moving early Saturday, blockchain data shows.

Railgun is a privacy wallet that lets users store tokens and use funds for decentralized financial services, such as lending and borrowing. These transactions are shielded, meaning the exact use of such funds is not known.

On the other hand, Thorchain is a bridge that lets users swap tokens between different blockchains without revealing their wallets.

There is still 12,500 ETH (worth around $21 million at current prices) sitting in the original wallet.

Accounts tied to FTX and FTX US were drained on Nov. 11, 2022, mere hours after the company filed for bankruptcy and founder Sam Bankman-Fried resigned from the crypto empire he ran. The attacker took over $600 million worth of ether at the time. In a since-deleted tweet, the-then FTX general counsel Ryne Miller said the exchange was taking “precautionary steps” to secure funds from other FTX wallets.

The attacker(s) who made off with the funds was(were) never identified. Some 21,500 ETH, worth $27 million at the time, were converted into the stablecoin DAI a few days after the hack. Another 288,000 ETH remained in some of the addresses affiliated with the attacker.

Saturday’s transactions come days before Bankman-Fried goes on trial in the U.S. over fraud and conspiracy to commit fraud charges filed by federal prosecutors last December. Bankman-Fried has pleaded not guilty to all charges, though other former FTX and Alameda Research executives have pleaded guilty; some are expected to testify against their former boss.