60 Million Stolen XRP Are Still in Play — and the Clock Is Ticking
The hacker who raided Binance still controls roughly 60 million XRP as of Elliptic's November 10 update, but their escape route is collapsing faster than the positions they're trying to unwind.
The playbook was straightforward: convert a massive stolen XRP stockpile into Bitcoin through on-chain swaps, blending dirty funds into the most liquid asset in crypto. It was working. Then it wasn't.
The Conversion Machine Jammed
Swap interruptions have thrown a serious wrench into the operation. What looked like a clean, methodical liquidation is now a stalled process, leaving tens of millions in traceable, stolen XRP sitting exposed on-chain while blockchain forensics firms watch every wallet move in real time.
Elliptic's investigators have been tracking the fund flows since the breach, and their latest numbers confirm the hacker has already burned through a significant portion of the original haul converting to Bitcoin. But with swap routes drying up and scrutiny intensifying, offloading the remaining 60 million XRP quietly is becoming close to impossible.
This matters for a reason most people aren't talking about: 60 million XRP hitting the market in a forced or panicked liquidation would be felt. At current prices, that stockpile represents tens of millions of dollars in potential sell pressure, and any sudden movement could spook XRP traders who have no idea this overhang exists.
Why Swap Interruptions Change Everything
The hacker's strategy depended on speed and anonymity. Cross-chain swaps offered both. But when swap protocols flag suspicious volume or regulators pressure bridge operators, that anonymity erodes fast.
What's left is a criminal sitting on a large, highly visible pile of stolen assets with fewer tools to move them. Every failed swap attempt leaves a longer on-chain trail. Every delay gives investigators more time to coordinate with exchanges on wallet blacklisting.
The walls are closing in, but the remaining XRP hasn't moved yet. That's the part worth watching.
What Traders Should Actually Do Right Now
If you hold XRP or trade it actively, add this to your radar. A sudden spike in XRP volume with no corresponding news cycle could signal forced movement of these funds. Watch order book depth on major exchanges for unusual sell-side pressure.
More broadly, this situation is a live reminder that stolen funds don't disappear, they create hidden supply overhangs that can materialize without warning. Blockchain forensics firms like Elliptic are your early warning system here.
Follow Elliptic's wallet tracking updates. If that 60 million XRP starts moving, you want to know before the market does.