Binance freezes $5 million in funds looted from BtcTurk after alleged $54 million hack of Turkish exchange

Quick Take

  • The Turkish cryptocurrency exchange BtcTurk said on Saturday that a cyberattack affected the funds held in ten of its hot wallets, though the exchange claimed the vast majority of its crypto, which is stored in cold wallets, remains secure.
  • Binance CEO Richard Teng stated on X that his exchange is assisting BtcTurk with investigating the hack and has frozen “over $5.3 million in stolen funds so far.”
  • Blockchain sleuth ZachXBT has pegged the possible losses from the hack at $55 million, largely in AVAX tokens, after observing suspicious transfers that coincide with the hack. 

Turkish cryptocurrency exchange BtcTurk announced that a cyberattack affected the cryptocurrency stored in ten of its hot wallets following reports of suspicious transfers of Avalanche AVAX +9.27% tokens on Saturday. The exchange noted that its cold wallets, which contain the vast majority of its assets, remain secure and the company remains solvent, according to the company's announcement

Binance CEO Richard Teng announced on X that his company, the world's largest crypto exchange, is assisting BtcTurk with the investigation and has frozen "over $5.3 million in stolen funds so far." 

Blockchain sleuth ZachXBT said that suspicious transfers of about $54 million in Avalanche tokens were likely connected to the attack following the results of a timing analysis. The funds were transferred to exchanges such as Binance and Coinbase using THORChain and then withdrawn as Bitcoin to two separate wallets, ZachXBT noted, in large transactions that occurred around the same time as BtcTurk's disclosure of the attack. 

In addition, the relevant Avalanche wallet had been previously identified by a blockchain researcher as belonging to a Turkish cryptocurrency exchange, lending credence to the connection between BtcTurk and the Avalanche transfers.

Start your day with the most influential events and analysis happening across the digital asset ecosystem.

By signing-up you agree to our Terms of Service and Privacy Policy
By signing-up you agree to our Terms of Service and Privacy Policy

Furthermore, ZachXBT stated on Telegram that online casino Sportsbet "was likely hacked for $3.5M+ by the same threat actor as BTCTurk two hours before as funds from the thefts comingled." Sportsbet was unable to be immediately reached for comment by The Block, but a message on Sportsbet's homepage states that "transactions on BTC and BSC networks are currently unavailable as well as gameplay with BTC and BNB" in a message under the heading "Cashier Maintenance." 

The price of Avalanche fell about 10% following the transfers, though it has since recovered 5% from its lowest value on Saturday, according to The Block's Avalanche Price Page


Disclaimer: The Block is an independent media outlet that delivers news, research, and data. As of November 2023, Foresight Ventures is a majority investor of The Block. Foresight Ventures invests in other companies in the crypto space. Crypto exchange Bitget is an anchor LP for Foresight Ventures. The Block continues to operate independently to deliver objective, impactful, and timely information about the crypto industry. Here are our current financial disclosures.

© 2023 The Block. All Rights Reserved. This article is provided for informational purposes only. It is not offered or intended to be used as legal, tax, investment, financial, or other advice.

About Author

Zack Abrams is a writer and editor based in Brooklyn, New York. Before coming to The Block, he was the Head Writer at Coinage, a Web3 media outlet covering the biggest stories in Web3. The story he co-reported on Do Kwon won a 2022 Best in Business Journalism award from SABEW. Other projects included a deep dive into SBF's defense based on exclusive documents and unveiling the identity of the hacker behind one of 2023's biggest crypto hacks — so far. He can be reached via X @zackdabrams or email, [email protected].