Wallet Tied to Binance Hack Moves $46M in SOL to Unknown Address

3 min readPublished 1 Nov 2026Updated 1 Nov 2026, 12:55 UTC

One report says the funds were swapped into Bitcoin through the Relay protocol, though full transaction details remain unsettled.

Blockchain trackers have flagged a large transfer of Solana tokens from a wallet long associated with a Binance security breach. The wallet moved 485,270 SOL, valued at approximately $46 million, to an address that has not been publicly identified. The movement was picked up by on-chain analysts shortly after it occurred.

One account of the transfer states that the funds did not simply sit in a new wallet. Instead, the SOL was reportedly converted into Bitcoin through Relay, a protocol used for cross-chain asset swaps. If accurate, this would suggest an effort to diversify the holdings away from Solana and potentially complicate tracing efforts.

The wallet in question has been linked by researchers to an earlier Binance hack, though the exact timeline and mechanics of that original breach were not detailed in the available reporting. Funds tied to major exchange hacks often remain dormant for extended periods before being moved, a pattern seen across several high-profile crypto theft cases in recent years.

Analysts who track stolen crypto funds typically rely on wallet clustering and transaction graph analysis to connect addresses to known incidents. These methods can establish strong circumstantial links, but confirming the identity of a wallet’s controller is far harder. The lack of a confirmed owner for the receiving address means the ultimate destination of the $46 million remains unclear.

The use of cross-chain swap services like Relay is notable in this context. Such protocols allow holders to move value between blockchains without necessarily passing through centralized exchanges, where compliance checks could flag suspicious activity. This can make it more difficult for investigators and exchanges to freeze or recover stolen assets once they enter circulation on a new chain.

Binance has faced previous security incidents, and exchanges across the industry continue to invest in monitoring tools designed to detect and respond to large, anomalous transfers. Whether this particular movement triggered any internal review at Binance was not addressed in the available reporting. The exchange has not issued a public statement specifically addressing this transfer as of the time of writing.

Market Impact

A transfer of this size, while notable, represents a small fraction of Solana’s overall market capitalization and is unlikely to materially affect SOL’s price on its own. The more significant implication lies in what the movement signals about the handling of historically stolen crypto assets. Large, dormant wallets tied to past hacks periodically resurface, often prompting renewed attention from security researchers and exchanges alike.

If the funds were indeed converted into Bitcoin, as one report indicates, that could reflect a broader pattern of bad actors using cross-chain infrastructure to obscure the origin and destination of illicit funds. This has implications for how exchanges and compliance teams approach wallet screening, particularly for protocols that facilitate swaps outside traditional custodial rails.

The transfer underscores the persistent challenge of tracking stolen cryptocurrency once it moves across chains, and further details about the destination wallet and the funds’ ultimate use may emerge as on-chain analysts continue monitoring the activity.

Frequently Asked Questions

How much SOL was moved and what is it worth?

The transfer involved 485,270 SOL, valued at approximately $46 million at the time of the move.

Is the wallet confirmed to be linked to a Binance hack?

On-chain trackers have associated the wallet with a prior Binance security breach, though the identity of its controller has not been independently confirmed.

Were the funds converted into another cryptocurrency?

One report states the SOL was swapped into Bitcoin using the Relay cross-chain protocol, though this detail has not been confirmed across all sources.