Crypto Traders Profit as Binance Hackers Dump Stolen Funds

Market Chaos

Theft of $6.3 billion from the world's largest crypto exchange, Binance, created a rare windfall for fast-moving trading firms and skilled investors. Apparent North Korean hackers rushed to convert stolen funds and accepted punishing prices, losing about $119 million through poor execution. James Aitchison, chief investment officer at Caerus Global Management, noted that a single, price-insensitive seller moving through thin liquidity distorted prices across disparate venues.

Rushed Swaps

After gaining control of funds on October 29, the attackers focused on stablecoins before issuers could freeze them. Within half an hour, they aggressively swapped USDT into Ether and other cryptocurrencies. Tether and Circle froze roughly $1.8 billion of their stablecoins about 40 minutes after the Ethereum leg began, according to TRM Labs. Binance stopped withdrawals during the breach, allowing price gaps to widen.

Arbitrage Wins

Luca Parlamento of D2 Finance said his firm traded against the thief, noting hackers paid an average of about $2,657 for Ether on decentralized exchanges like Uniswap, compared to roughly $2,300 on Hyperliquid. Annanay Kapila of QFEX borrowed Ether on Aave and sold it where prices were highest, making a 25% profit within five minutes. Bitquery estimates about half of the hackers' $119 million loss was captured by traders and arbitrage bots, while block assemblers received $29.5 million in high fees.

Further Impact

Dislocations spread to other tokens, including Tron and Ripple's RLUSD. On Sunday, Binance began restoring withdrawals in phases and stated it is using company funds to replace stolen assets after working with partners to freeze about $3 billion. North Korea denied responsibility, with Kim Yo Jong calling the claims absurd and a grave political provocation.

Context

Sudden cyber attacks on major financial platforms often create extreme volatility because automated trading systems and arbitrageurs must react instantly to mismatched prices across different digital ledgers. When normal movement of assets between trading pools is blocked by emergency suspensions, temporary price gaps naturally appear until liquidity returns.