What happened
27,071,365 USDT and 11 ETH were stolen from a Binance user, private key leakage suspected.
On Nov 11, 2023, an attacker exploited an Ethereum address and drained 27,071,365 USDT and 11 ETH. The victim had received these USDT 9 days prior from Binance. The attacker quickly swapped the stolen USDT for ETH and transferred the funds to another EOA, distributing them between multiple addresses.
The stolen funds were then sent to various services, including WhiteBIT, FixedFloat, and SideShift, and bridged to Bitcoin via THORChain.
Attacker Address:
Involved Addresses:
Malicious Transaction:
FixedFloat Transaction:
White BIT Transaction:
THORChain Router Transaction:
Protocol details
Evidence
Understand the attack patterns
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
