New details show about $2.2 million in BTC moved via CoinJoin, while about $3.24 billion remains under tracking in the Binance hack case.
Key developments
The latest information shows new money-laundering activity involving funds tied to the Binance hacker: about $2.2 million in BTC was moved via CoinJoin. At the same time, about $3.24 billion in funds remains under tracking. The incident has been described as involving the largest exchange theft in history, drawing high security and market attention. This disclosure is more specific than other reports on the same incident. The key point is that the moved amount, the amount still being tracked, and the fund transfer route are provided at the same time, offering a clearer angle for observing the flow of stolen funds.
Key facts
Based on the disclosed information, there are three key facts. First, the entities involved are funds related to the Binance hacker. Second, the transferred amount is $2.2 million in BTC, and the route is CoinJoin. Third, the amount not moved or still within tracking scope is $3.24 billion. The above amounts are denominated in US dollars and BTC. The source did not disclose the corresponding BTC quantity, specific addresses, transaction times, involved trading platforms, or further actions by law enforcement or security agencies. Therefore, the current information is better viewed as an update on fund flows rather than a final conclusion on the case.
Impact of the mixing route
CoinJoin is at the center of this fund transfer. The source shows that the hacker has begun processing BTC through this route, meaning the stolen funds have entered a new transfer phase. For the market, the focus is not only on the size of the single $2.2 million transfer, but also on whether the mixing route changes the difficulty of tracking funds and whether the $3.24 billion still being tracked will see similar moves. It is important to distinguish that still being tracked describes a monitoring status and does not mean the funds have been recovered; moved funds do not mean they are out of tracking. The current source does not provide recovery ratios, frozen amounts, or law enforcement progress, and relevant judgments must await further disclosures.
Data basis and interpretation
This source uses both US dollars and BTC as units of measurement. The $2.2 million in BTC describes the amount moved via CoinJoin, while $3.24 billion describes the amount still being tracked. The two are not fully consistent in basis and cannot be simply added together or directly converted into a complete picture of the same pool of funds. The source did not specify how much BTC corresponds to $2.2 million, nor at what price $3.24 billion was calculated. Therefore, readers should treat the two figures as information from different dimensions: one reflects the latest transfer action, and the other reflects a broader tracking status. For crypto security incidents, USD amounts help measure impact, while BTC quantities help on-chain tracking, but the lack of a unified basis makes comparison more difficult.
Background and information boundaries
The incident is defined as the largest exchange theft in history, indicating its impact goes beyond a single exchange security incident and involves on-chain fund tracking, use of mixing tools, exchange security protection, and regulatory attention. The specificity of this information lies in disclosing both the $2.2 million BTC transfer and the $3.24 billion still being tracked, shifting the incident from a general hacker money-laundering narrative to quantifiable observation of fund flows. However, the source did not provide information such as the incident timeline, attack method, Binance's specific response, jurisdictions, or investigating agencies, and this article should not make additional inferences about these gaps.
Security and tracking implications
In exchange theft cases, fund transfer routes are often a focus for markets and security agencies. As the transfer route disclosed this time, CoinJoin makes the outside world pay more attention to whether the relevant BTC will continue to be split, mixed, or moved into new address systems. At the same time, the information that $3.24 billion is still being tracked shows that although some funds have moved, a larger amount remains within a monitoring narrative. For the industry, this means post-theft fund handling is not a one-time event but an ongoing security and tracking process. The source did not specify the tracking entity, technical means, or coordination mechanisms, so currently only an objective summary of the publicly disclosed fund status can be made.
Follow-up focus
Three areas can be watched going forward: first, whether CoinJoin-related funds continue to move and whether on-chain trackers can continue to mark them; second, whether the status of the $3.24 billion still being tracked changes, including new mixing, splitting, or cross-chain actions; third, whether exchanges and security agencies disclose more complete response measures. For the industry, the incident again puts post-theft fund handling, mixing route tracking, and crypto security infrastructure in focus, but before further facts are disclosed, market impact should still be viewed mainly through security and compliance lenses and should not be extended to price judgments.
