Need help? Support
BITCOIN
Tether Dominance USDT.D

ETH hacker sells $117M stolen ETH

Published 599 words 3 min read

TLDR

A long-dormant Ethereum exploiter has started selling a large chunk of stolen ETH, putting roughly nine figures of value into motion and adding to existing sell pressure on ETH.

  1. An address tied to an old exploit has awoken after about two years, moving and selling a large stack of stolen ETH and converting tens of millions of dollars into stablecoins from a dormant Ethereum exploit address.
  2. This selling is landing on a market already weakened by recent ETF outflows and institutional selling, alongside a sharp drop in ETH futures open interest that signals broad deleveraging.
  3. The key things to watch now are further on-chain moves from the exploiter, whether more funds hit centralized exchanges, and whether ETH can hold key support as this extra supply comes through.

Deep Dive

1. What The Hacker Just Did

Media reports describe a long-dormant Ethereum exploit address that has started to move again, after roughly two years without activity, linked to a large prior theft of ETH.

One report notes that part of the funds were moved into about 57 million dollars of USDT, then converted into DAI stablecoin, indicating the attacker is actively derisking into dollar-pegged assets from a dormant Ethereum exploit address.

The total value referenced across coverage is in the region of 100 million dollars or more, so the headline figure of 117 million dollars should be treated as an approximate scale rather than a precise single transaction amount.

What this means

This is not a fresh hack, but a long-time holder of stolen ETH finally trying to cash out in size, which can create short, sharp waves of extra sell pressure.

2. How It Hits The ETH Market

The timing is sensitive for Ethereum (ETH). Separate coverage already points to heavy selling from institutions and spot ETFs, with recent ETF outflows and institutional selling weighing on the broader crypto market.

On the derivatives side, ETH futures have seen a large drop in open interest, with one analysis citing a three-year low and over 80 million ETH worth of positions closed out, a sign that leverage traders are cutting exposure rather than adding new risk.

In that context, an extra roughly 100 million dollars of exploiter selling is additive to a weak backdrop, but it is still small relative to ETHs multi-billion dollar daily trading volume, so it is more of an accelerant than a sole driver.

What this means

Hacker selling can amplify downside in a fragile market, but by itself it is unlikely to dictate ETHs long-term trend unless it coincides with broader risk-off flows.

3. What To Watch Next

  1. On-chain, trackers will monitor the exploiters addresses for further swaps into stablecoins or transfers to major exchanges, which would signal more imminent selling.
  2. Exchanges may react by flagging or blocking deposits from known exploit-linked wallets, which can slow down, but not fully stop, cash-out attempts.
  3. Price-wise, ETHs behavior around current support zones, together with ETF flow data and futures positioning, will show whether the market is absorbing the extra supply or sliding into a deeper drawdown.
What this means

If you follow ETH, the useful signals are not just the hackers wallet, but whether ETF flows stabilize and derivatives positioning stops shrinking, which would suggest the market is digesting the shock.

Conclusion

A long-silent Ethereum exploiter choosing this moment to sell a large stolen stash adds one more source of supply to an already stressed ETH market. The move highlights how old exploits can resurface unexpectedly, but its impact depends on broader conditions like ETF flows, derivatives positioning, and overall risk appetite. Watching those bigger levers, alongside the hackers on-chain activity, will matter more than the exact dollar figure of this one sale.

Educational information only. Crypto markets are volatile and this is not financial advice.


Top