# FTX Hacker Transfers A Portion Of Stolen Funds To OKX After Using Bitcoin Mixer
Hackers who took more than $450 million in assets from FTX and FTX.US right after the crypto exchange declared bankruptcy on Nov. 11 are now attempting to launder the money by moving assets around.
A cryptocurrency analyst known as ZachXBT on Twitter claimed that the FTX hackers have sent some of the stolen funds to the OKX exchange after utilizing the Bitcoin mixer ChipMixer. The analyst mentioned that at least 225 BTC, equivalent to $4.1 million, has been transferred to OKX up to now.
1. Myself and @bax1337 spent this past weekend looking into the FTX attacker’s deposits to ChipMixer. It appears they’ve likely been transferring a portion of the stolen FTX funds to OKX after withdrawing from CM. So far we’ve accounted for at least $4.1m (255 BTC) sent to OKX pic.twitter.com/C46JZWtktn – ZachXBT (@zachxbt) November 29, 2022
As per ZachXBT, the FTX hacker initiated depositing BTC into ChipMixer on Nov. 20 following the use of Ren Bridge, a protocol acting as a bridge for cryptocurrencies. ZachXBT shared in his analysis that he identified a pattern with addresses receiving funds from ChipMixer. He noted that each address had a pattern of “withdrawal from CM,” “50% of funds go elsewhere,” and then “50% deposited to OKX.”
After the deposits to the OKX exchange were uncovered, the director of OKX confirmed on Twitter that, “OKX is aware of the situation, and the team is investigating the wallet flow.”
#OKX is aware of the situation, and the team is investigating the wallet flow. — lennixlai.eth (OKX) (@LennixOKX) November 29, 2022
Following the confirmation of the hack shortly after FTX declared bankruptcy, Cointelegraph reported on Nov. 12 that out of the $663 million taken, around $477 million were suspected to be stolen, while the rest was moved into secure storage by FTX themselves.
By Nov. 20, the hacker began transferring their Ether (ETH) holdings to a new wallet address and dropped from being the 27th largest ETH holder post-hack after selling 50,000 ETH.
The ability of the hackers to drain assets from both FTX global and FTX.US simultaneously, despite these two entities being completely separate, sparked discussions within the crypto community and led to speculation about a potential insider involvement.
**Image Credit:** Momentum Ronnarong / Shutterstock
