Live tape
Top 8, mentions 7d7,291GOOGL1,613 mentions▲ +0.03NKE1,585 mentions▲ +0.03META1,034 mentions▲ +0.05NVDA906 mentions▲ +0.10TSLA609 mentions▲ +0.05MSFT523 mentions▲ +0.04RBA518 mentions▲ +0.05QQQ503 mentions▲ +0.07

Crypto Hacker With Russian Ties Suspected In FTX Breach, Says Crypto Surveillance Firm

Blockchain monitoring firm Elliptic has raised the likelihood that the hacker responsible for the FTX exchange breach may have ties to Russia. Their theory is partly based on the fact that crypto funds were transferred while FTX’s founder, Sam Bankman-Fried, was in a Manhattan court. The time of the event cast doubt on the idea that he was the thief.

Elliptic provided a timeline outlining the movements of the stolen funds on the blockchain. It shows that much of the stolen assets were converted into Bitcoin and passed through ChipMixer. ChipMixer is an unlicensed Bitcoin privacy mixer shut down by the Justice Department.

Why not SBF?

According to Elliptic, substantial stolen assets were mixed with funds from Russian-linked criminal groups including ransomware gangs and darknet markets, before being sent to cryptocurrency exchanges. This suggests the involvement of a broker or intermediary with connections to Russia.

The FTX exchange suffered a breach last November, resulting in the loss of 9,500 Ethereum (ETH) and other crypto assets. Despite some funds being frozen for compliance reasons, most were converted into different cryptocurrencies and moved to other blockchains, making it more challenging to trace the funds. The report also highlights RenBridge, Alameda Research-owned, and ChipMixer-linked’s potential role in laundering the stolen assets.

While Elliptic doesn’t believe the Lazarus Group is responsible for the FTX hack, it underscores the significance of tracing crypto funds to prevent their use in criminal activities.

Ledger Nano S Plus hardware wallet

Affiliate link — we may earn a commission.

The data behind this story

$ETHGrayscale Ethereum Staking Mini ETFPrice$25.77 ▲0.78%Mentions · 30d4Samplen=4Avg volume189,676View on the dashboard

Finazon · prior-day close, indicative (IEX-derived, not the official close) · Oct 1, 2026

The Distributed Newsletter

The week’s numbers, every figure sourced and sample sized, in your inbox each Friday.