While moving loot out of the drained Binance hot wallet, the attacker's address sent 18 different altcoins straight to the Newton Protocol (NEWT) token contract instead of a wallet, in a run of transfers between 04:45 and 05:00 UTC on October 30.

The batch included about 8M NEWT, 4.66B DENT, 314M HOT, 111M ANIME, 49M CELR and 31.7M WOO, along with DOLO, HIGH, SIGN, FTT, RESOLV, LQTY, ANKR, KNC, ARPA, GLM, RARE and BARD.

Around $3.32M in tokens is now stuck in the token contract, where it cannot be recovered.

The slip is a small fraction of the roughly $6.3B taken from Binance, about $3B of which has already been frozen by stablecoin issuers and networks, while the attacker keeps converting the remaining altcoins into ETH.