According to @zachxbt, Haby swapped his portion of the theft proceeds from XRP to BTC via instant exchanges (source: ZachXBT on X, Dec 29, 2025, post 2005649194435195201). According to @zachxbt, a timing analysis identified the BTC address bc1qn3k5cz3905p6k50r44pjlj2rl9qcy72flsq3zh for these flows (source: ZachXBT on X, Dec 29, 2025, post 2005649194435195201). According to @zachxbt, the concrete path XRP -> instant exchanges -> BTC and the disclosed address provide a direct on-chain indicator for traders to monitor potential movements linked to the reported theft proceeds (source: ZachXBT on X, Dec 29, 2025, post 2005649194435195201).

According to ZachXBT, a suspicious transfer of 3520 BTC, valued at approximately $330.7 million, was reported nine hours ago from a potential victim's wallet to the address bc1qcrypchnrdx87jnal5e5m849fw460t4gk7vz55g. The stolen Bitcoin was quickly laundered through more than six instant exchanges and converted into Monero (XMR), resulting in a noticeable spike in XMR's market price. Traders should note heightened volatility for XMR and increased regulatory scrutiny of associated BTC and XMR addresses, as reported by ZachXBT on Twitter (source: ZachXBT, Twitter, April 28, 2025).