Binance hacker moves $798K in SOL into Privacy Cash mixer

Privacy Cash is a Solana-native mixing protocol that lets users obscure the origin of on-chain transfers, playing a role similar to Ethereum's Tornado Cash, which the US Treasury sanctioned in 2022 after North Korean hackers used it to launder stolen funds. Binance's $6.34 billion breach, still being investigated, produced an address that on Nov. 3 moved almost $798,000 in Solana into Privacy Cash, reviving the same laundering playbook regulators thought they had curbed three years ago.

Privacy Cash's decision to halt new deposits while leaving withdrawals open means the Binance hacker can still pull out funds already in the pools, even as fresh laundering through the protocol is blocked. Elliptic's tracing of $1.2 million in theft-linked ETH and SOL forces other mixer operators to weigh similar screening, while Binance users wait as the exchange works through replacing the $6.34 billion in stolen assets, a process with no confirmed completion date.

Privacy Cash markets itself as a tool for ordinary users to shield routine transactions, but a hacker's ability to run stolen Solana straight through its pools shows how easily that promise becomes a shield for theft. The protocol's power to pause deposits unilaterally also undercuts any claim to full decentralization: a system that can be switched off by its operators is not beyond the reach of the same pressure that forced Tornado Cash offline.

Attention now turns to whether Privacy Cash's promised wallet screening arrives before more theft-linked funds reach its pools, and whether the hacker's continuing conversion of stolen Solana into Bitcoin draws the kind of sanctions action that ended Tornado Cash. Binance's progress reports on replacing the $6.34 billion lost in the breach, and any fresh Elliptic tracing of flows through Privacy Cash, will show whether this laundering route stays open or gets closed.