Analyst SomaXBT has traced $140 million in Binance loot through four separate exit routes on the Tron blockchain. His breakdown centers on assets that haven't been frozen. Separately, the FBI issued a blocking request on Oct. 31 that explicitly covers THORChain node operators and downstream funds.
Four routes out on Tron
SomaXBT's work is a trace, not a seizure. He followed the money from the Binance loot into four exit routes, all on Tron, and mapped where it ended up. The total he puts on it is $140 million.
The part that matters is the status of those funds. His breakdown focuses on assets left unfrozen on Tron. So the money has been located, but it hasn't been stopped.
GFdaily hasn't independently verified the tracing. It's one analyst's account, and it should be read that way.
What the FBI asked for
The FBI's request is dated Oct. 31. It's a blocking request, and it doesn't stop at the original stolen funds. It explicitly includes THORChain node operators and downstream funds.
Downstream is the key word. Funds that have already moved on, or been split and passed along, fall inside the scope of the request. That's a wider net than a freeze on a single address.
Naming node operators is also notable. THORChain is run by a distributed set of operators rather than a central company. A request that names them directly goes to the people running the network's infrastructure, not just to a firm with a compliance desk.
Where the two threads meet
On their face, the analyst's trace and the FBI's request are separate pieces of news. One is a public breakdown of where $140 million went. The other is a law enforcement ask that reaches into THORChain and anything downstream of it.
They point at the same problem, though. Money that's traced but unfrozen is money that can keep moving. The FBI's request is aimed at the places where that movement could happen next.
The timing isn't subtle either. The request went out Oct. 31, and the Tron breakdown focuses on funds still sitting unfrozen. Whether the two are directly linked isn't something the facts establish, and we won't claim they are.
What isn't known yet
Several things aren't on the record. There's no public confirmation here of how many THORChain node operators have received or acted on the FBI request. Nothing indicates how much of the $140 million, if any, has been frozen since the trace was published. And the breakdown's account of the four routes hasn't been matched against any official tally.
Those are the numbers to watch. If node operators comply, or decline to, that will show up in how the funds move. If the Tron assets get frozen, SomaXBT's trace will be the first place people look to check it.
For now, the next concrete development is whether the unfrozen Tron funds stay where they are following the Oct. 31 request, and whether anyone confirms action against them.
