The FTX exploiter has moved the remaining 10,000 Ether (ETH), approximately $17.3 million, from the address 0x3e9 to Bitcoin using THORChain.
The exploiter transferred all remaining ETH in four transactions, all directed to ThorSwap Router through intermediary addresses. All these funds are bridged to Bitcoin using ThorSwap’s inter-chain swapping functionality.
Transactions took place in an order of 1250, 2500, 1500, and 4750 ETH in sequence on October 30 and October 1.
ThorSwap is a multi-chain decentralized exchange (DEX) that is powered by liquidity from THORChain. It allows seamless cross-chain swaps for numerous assets across nine different chains.
After 10 months of inactivity, the FTX hacker moved 5,000 ETH from the same address to THORChain and Railgun, as well as swapped a significant amount into tBTC on September 30.
While the funds moved represent only 6%, the hacker entity still holds over $284 million of stolen assets combined in different addresses, according to data from Spotonchain.
Also Read: Over 50% ETH to BTC Transactions On ThorSwap Are Stolen Funds
