Investigations: following stolen bitcoins on-chain
Each case starts from an address that a named analytics firm has flagged. We follow every transaction from it on the public Bitcoin blockchain and mark where the coins reach a known service. Unknown addresses stay unknown.
Cases
- Case #1 · open, liveBinance hack 2026: where the stolen bitcoins go
On 29 Oct 2026 at 20:20 UTC, 18,270.2 BTC left a Binance hot wallet in 11 transactions to one address. Crystal Intelligence labels the receiving cluster a potential Binance thief. Within minutes the coins were split into 19 addresses. We follow every move on-chain.
18,270.2 BTC still held in 19 addresses · 30 addresses traced