The wallet behind the October 29 Binance exploit has started converting its Solana haul into bitcoin. The address holds 970,522 SOL taken in the attack, worth about $95.9M.

In the past hour alone, the hacker moved 486,970 SOL ($46.4M) and is routing it into BTC through the cross-chain bridge Relay Protocol.

Solana was a small slice of the roughly $6.3B taken from the exchange, the largest crypto heist on record, attributed to the North Korea-linked group TraderTraitor. About $3B in stablecoins has been frozen, while swaps like this one move the remaining assets into coins that are harder to seize.