Wallets linked to Binance were drained of at least $5.5B on October 29, in what would be the largest hack in crypto history. The attacker is now using Uniswap and Aave as exit ramps, swapping stablecoins that issuers can freeze into ETH, which has no issuer able to block it.

On Aave, one wallet deposited about $60M in USDT and borrowed 19,762 ETH against it within four minutes. Relay wallets also received tens of thousands of ETH from Uniswap contracts, including a single 20,940 ETH ($45.6M) fill from UniswapX. Neither app showed signs of a flaw.

As of 22:07 UTC, about 253,000 ETH (roughly $570M) sat in two wallets with no outgoing transfers.

Aave has frozen its V3 markets on Ethereum mainnet, and Kamino paused borrowing in its SOL/BTC market as a precaution. Stablecoin issuers have frozen more than $2B in USDT and USDC, and Ripple froze about $200M in RLUSD. Binance said it is investigating the incident.