The Binance hacker is cashing out the stolen XRP, and it's not being shy about it. Since November 5 about 171.66 million XRP has left the attacker's wallets, out of the 233.46 million taken on October 29. Roughly 61.8 million is left. XRP sat around $1.24 to $1.27 before the selling started. Today it's around $1.05.
Published November 10, 2026, 1pm ET. On-chain numbers as of Tuesday morning; they change by the hour.
The numbers
| XRP stolen from Binance | 233.46 million (Oct 29) |
| Split into | 6 new wallets on Nov 2 (five with 40M, one with 33.46M) |
| Sent out since Nov 5 | About 171.66 million |
| Still left | About 61.8 million, mostly in 2 wallets |
| Biggest day | Nov 9, about 46.63 million XRP |
| XRP price | About $1.05 at 12:51pm ET (Coinbase); $1.24 to $1.27 range Oct 31 to Nov 2 |
What happened, step by step
On October 29 the attacker pulled 233.46 million XRP out of five Binance accounts in about four minutes. That was one piece of the roughly $6.3 billion hack we covered in the main Binance story. The FBI blames the TraderTraitor group, the same crew behind the fake job interview trick.
Then the coins just sat there for days. On November 2 the attacker split them into six fresh wallets: five got 40 million each and the sixth got 33.46 million. Back then XRP was holding a tight $1.24 to $1.27 range and nobody had sold a coin yet.
On November 5 the selling started. Cryptoticker checked the XRP Ledger directly and counted the daily outflows:
- Nov 5: about 21.89 million
- Nov 6: about 46.22 million
- Nov 7: about 35.98 million
- Nov 8: about 15.38 million
- Nov 9: about 46.63 million, the heaviest day
- Nov 10 (early morning UTC): about 5.54 million
The coins got sprayed out in hundreds of smaller payments (929 of them, to 94 addresses) and mostly swapped into Bitcoin through THORChain, a swap service, according to Elliptic. Four of the six wallets are now basically empty. One still has about 28.35 million, and one with 33.46 million hasn't moved a coin yet.
Quick note on the numbers: they don't all line up perfectly. Elliptic put the leftover at about 95 million on Monday afternoon, and 99Bitcoins had about 94.5 million on Monday too. Cryptoticker's 61.8 million is from Tuesday morning, after another big round of selling. So they mostly agree, just at different times.
What the selling does to the price
Here's the honest version. The hacker isn't the only reason XRP is down. Today's hot inflation report and money leaving crypto ETFs dragged everything lower, Bitcoin and Ethereum included.
But it doesn't help either. The hacker doesn't care about getting a good price. They just want out before anyone can block them. That's steady selling with zero patience, and markets don't like that. On Monday alone the attacker moved 46.6 million XRP. Global XRP trading that day was about 2 billion XRP, so it's only around 2% of the volume. Not huge on paper. But it's 2% that keeps coming every day, and everybody can see it on the ledger, so traders get nervous and step back.
And no, Ripple can't freeze it. Plain XRP has no company behind it with a freeze button. The only places that can stop it are exchanges and swap services the coins pass through. THORChain did pause XRP trading on November 7, but swaps were back by the afternoon of November 8.
What to watch
- The last two wallets. About 61.8 million XRP is left. At the recent pace of around 34 million a day, that's a couple of days of selling if they keep going.
- The 33.46 million wallet. It hasn't moved at all. If it suddenly starts sending, expect another round of nervous headlines.
- Exchanges and swap services. Any freeze or block would cut the selling off.
- The rest of the market. Bitcoin, inflation and ETF flows matter more for XRP than one hacker once the stolen coins run out.
We don't do price predictions. Once the stolen coins are gone, this particular pressure ends. That's it.
All of 2026's hacks are in one place in our crypto hacks tracker.
Like this kind of news? Get the WIZY weekly: one email every Sunday, no spam.
If you hold XRP
- Your XRP isn't at risk from this. These are Binance's stolen coins being sold, not anyone else's wallets getting drained. Binance says it covered the losses and fully backs customer XRP balances.
- Watch for fake "Binance refund" or "recovery" messages. Scammers love hacks like this.
We may earn a commission from links on this page.
If you want to know how investigators actually follow stolen crypto around, Tracers in the Dark by Andy Greenberg is a really good read.
FAQ
How much XRP did the Binance hacker steal?
About 233.46 million XRP on October 29, 2026.
How much has been sold?
About 171.66 million XRP left the attacker's wallets from November 5 to Tuesday morning, November 10. About 61.8 million is left.
Can Ripple freeze the stolen XRP?
No. Native XRP can't be frozen on the ledger. Only exchanges and swap services can block it.
This is news, not financial advice.
Sources
- Cryptoticker: Binance hacker's 172M XRP sell-off (XRP Ledger check, Nov 10) cryptoticker.io
- 99Bitcoins via TradingView: Binance hacker splits 233M stolen XRP across six wallets tradingview.com
- 99Bitcoins via TradingView: Binance hacker moves 139M XRP tradingview.com
- Cryptopolitan: Stolen Binance XRP lands in six wallets Ripple cannot freeze cryptopolitan.com
- The Defiant: Binance attacker splits $292 million in XRP across six wallets thedefiant.io
- Coinbase: XRP spot price, 12:51pm ET Nov 10 coinbase.com
Written by the WIZY creator
A lifelong gamer and Warhammer painter, and the maker of the WIZY RPG game. I write about games, hardware, Warhammer and crypto in plain English, and I check every fact against its source.
