Over 50% of Binance Hack Laundering Transactions Were Automated, Blockchain Investigator SomaXBT Finds
Key Takeaways
- •Blockchain investigator SomaXBT determined that roughly 54% of 47,644 transactions linked to laundering the stolen Binance funds were clearly automated.
- •The automated laundering activity spanned the TRON and Solana blockchains, indicating the operation is being carried out at scale through automated processes.
- •SomaXBT conducted the tracing by analyzing raw on-chain data, mapping individual transactions and identifying patterns in how the funds were laundered.
- •Attackers are using multiple blockchains, bridges, and swapping services to obscure fund movements, making cross-network tracing increasingly complex for investigators.
- •BitKE highlighted the findings while quoting Binance Co-Founder Changpeng Zhao, who warned that banks also face security risks from artificial intelligence.
Blockchain investigator SomaXBT has determined that more than half of the transactions linked to the laundering of funds stolen in the Binance hack were automated. In an analysis of 47,644 transactions on the TRON and Solana blockchains, SomaXBT identified approximately 54% as clearly automated, suggesting the laundering operation is being conducted at scale using automated processes.
A share of that magnitude matters because it points to laundering at a pace and volume that is difficult to counter through manual review alone, raising the premium on programmatic, on-chain analysis.
The findings were shared by the investigator on X.
BitKE highlighted the development in an X post quoting Binance Co-Founder Changpeng Zhao (CZ) on the security risks posed by artificial intelligence:
“Banks are also not safe with the security risks of AI.” – @cz_binance, Co-Founder, @binance #BinanceHack #CryptoHacks #CryptoRisks #Binance — BitKE (@BitcoinKE) November 3, 2026
The analysis underscores the growing complexity of tracking stolen cryptocurrency, as attackers make use of multiple blockchains, bridges, and swapping services to obscure the movement of funds. For tracing teams, that means piecing together activity across networks with different transaction structures and watching for points where funds touch services with the ability to freeze them.
According to SomaXBT, the investigation traced the movement of funds through raw on-chain data, mapping individual transactions and identifying patterns in the laundering process.
The analysis comes as blockchain investigators and cryptocurrency platforms continue efforts to trace and freeze assets linked to the Binance exploit. Further tracing updates and any platform moves to freeze additional portions of the funds are developments to watch as that effort continues.
Related: REPORT | AI is 2x More Effective at Exploitation Than Detection in Crypto, Says Binance Research
