Wallets linked to the Binance hack continue moving Solana into Bitcoin through a multistep cross-chain process, Lookonchain said on November 4, 2026. The entity splits SOL across multiple wallets, sells it for USDC, bridges the stablecoin to Ethereum, exchanges it for Ether and is believed to use THORChain to convert the Ether into Bitcoin. THORChain facilitates native-asset swaps across blockchains by routing liquidity through RUNE, without requiring wrapped tokens. The latest activity reflects continued movement of suspected theft proceeds rather than a new breach at THORChain. Lookonchain did not disclose the transfer amounts or the hacker's final Bitcoin holdings, and there has been no reported recovery or completed cash-out.