Hackers Swap Stolen Bitcoin and Litecoin Into Monero
After stealing the funds, the attackers quickly began converting large amounts of Bitcoin and Litecoin into Monero ($XMR) using instant crypto exchange platforms.
Because Monero has lower trading volume than Bitcoin, these large swaps pushed Monero’s price up by more than 60% in a short time.
In addition to swapping into Monero, the attacker also moved Bitcoin across different blockchains using THORChain, a decentralized cross-chain protocol. $BTC was bridged to the Ethereum, Ripple, and Litecoin networks.
THORChain has increasingly become a preferred tool for laundering stolen crypto because it is permissionless and does not require KYC, making it easier for criminals to move funds without identity checks.
According to ZachXBT, the attackers swapped:
- 818 $BTC (about $78 million) into
- 19,631 ETH (about $64.5 million)
- 3.15 million XRP (about $6.5 million)
- 77,285 $LTC (about $5.8 million)
Once the stolen assets are converted into Monero, tracing them becomes virtually impossible. Monero’s built-in privacy features hide transaction details, making it extremely difficult for investigators to follow the money trail. This case highlights how advanced laundering methods are now being used after major crypto scams, making recovery of stolen funds far more challenging.
Stolen Funds Linked to These Wallet Addresses
ZachXBT identified three main wallet addresses connected to the theft, which received a combined total of 1,459 $BTC and 2.05 million $LTC, confirming the massive scale of the scam.
Theft Addresses:
- https://mempool.space/address/bc1qluxw46r55wf3dnk9c652vrt4duadm3hpuktf86
- https://mempool.space/address/bc1qpsmh26ja0fzzf286zulmt9eywujc2pggj40wzm
- https://blockchair.com/litecoin/address/ltc1qly43c2prj4c2e85dcspzpjd36jnapnenldnr70
The wallets include two Bitcoin addresses and one Litecoin address that were directly linked to the stolen funds.
Investigators believe the attackers have not finished moving the stolen money yet.
A large part of the Bitcoin is currently sitting in a wallet believed to be controlled by the scammers. This suggests they may be waiting for public attention to fade before moving the funds again.
Bigger Than Most Past Crypto Thefts
ZachXBT said this case is even larger than the $243 million crypto scams he investigated in 2024, making it one of the biggest personal wallet thefts in crypto history.
Unlike exchange hacks, this attack shows a dangerous trend where criminals target individuals directly instead of platforms.
This scam did not involve hacking software or breaking security systems. Instead, criminals used social engineering, tricking the victim unknowingly.
Never Miss a Beat in the Crypto World!
Stay ahead with breaking news, expert analysis, and real-time updates on the latest trends in Bitcoin, altcoins, DeFi, NFTs, and more.