Venus Protocol Attacker Consolidates Stolen Funds into 2,257 ETH

The perpetrator behind a recent exploit on the Venus Protocol has initiated the movement of illicitly obtained assets, converting various tokens into Ethereum (ETH). According to on-chain monitoring data, the attacker exchanged a significant portfolio of digital assets and bridged them to the Ethereum mainnet on March 21, 2026. This maneuver marks a critical phase in the attacker's attempt to obfuscate the paper trail of the stolen funds following the breach of the decentralized lending platform.

On-Chain Analysis of the Asset Swap

Information provided by prominent on-chain analyst Yu Jin reveals that the attacker liquidated several different types of cryptocurrencies to consolidate their holdings. The assets involved in this specific conversion included 2,178 BNB, 20 BTC, and approximately 1.466 million CAKE tokens. These assets were swapped for a total of 2,257.3 ETH, which carries an estimated market value of roughly 6.72 million USD.

Bridging assets between different blockchains, such as moving funds from BNB Chain to Ethereum, is a common tactic used by malicious actors to complicate the tracking efforts of security researchers and law enforcement.

Disparity Between Attack Costs and Recovered Value

Detailed scrutiny of the attacker's wallet history suggests that the financial outcome of the exploit may not have met the perpetrator's initial expectations. The data indicates a significant discrepancy between the capital deployed for the attack and the current value of the bridged assets:

• The attacker utilized 9.92 million USD in capital to execute the exploit.
• The current value of the recovered assets in ETH stands at approximately 6.72 million USD.
• The transaction took place approximately five hours prior to the analyst's report on March 21.

From an on-chain perspective, the attacker used 9.92 million U to execute this attack and has so far only recovered approximately 6.72 million in ETH.

The movement of these funds highlights the ongoing security challenges faced by Decentralized Finance (DeFi) platforms. While the Venus Protocol has encountered various security hurdles in the past, this latest event underscores the persistence of actors seeking to exploit vulnerabilities within the BNB Chain ecosystem. Security firms continue to monitor the 2,257.3 ETH as it sits on the Ethereum blockchain, awaiting further movement to centralized exchanges or mixing services.