Binance User Hack

REPORTED LOSS $27.1M
High Access Control

What happened

27,071,365 USDT and 11 ETH were stolen from a Binance user, private key leakage suspected.

On Nov 11, 2023, an attacker exploited an Ethereum address and drained 27,071,365 USDT and 11 ETH. The victim had received these USDT 9 days prior from Binance. The attacker quickly swapped the stolen USDT for ETH and transferred the funds to another EOA, distributing them between multiple addresses.

The stolen funds were then sent to various services, including WhiteBIT, FixedFloat, and SideShift, and bridged to Bitcoin via THORChain.

Attacker Address:

https://etherscan.io/address/0x03C40112…9F37E3

Involved Addresses:

https://etherscan.io/address/0xe6Deb829…54Ba98

https://etherscan.io/address/0x036163Ec…44d1c0

https://etherscan.io/address/0x0887946C…2D879A

https://etherscan.io/address/0xBB389d6a…a2F129

Malicious Transaction:

https://etherscan.io/tx/0x0f2183c8…d60321

FixedFloat Transaction:

https://etherscan.io/tx/0x59e18a43…fa753f

White BIT Transaction:

https://etherscan.io/tx/0xe38f12a0…26e021

THORChain Router Transaction:

https://etherscan.io/tx/0xba8ed274…6ecbfa

Case & protocol details

Classification Other
Protocol Type Exploit/Access control

Evidence & learning

Sources and on-chain records

Build your security review skills

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.