Investigation into the $28M exploit of the Bittensor network, tracing the attacker’s consolidation and laundering path after the drain.
The Bittensor exploit drained roughly $28 million from the network’s users. Once the funds moved, the trail became the story: how the attacker consolidated the proceeds, which bridges and services they leaned on, and where the laundering pattern matched infrastructure seen in previous incidents.
The published thread documents the flow of funds step by step, flagging the deposit addresses and services touched along the way: the practical information that exchanges and investigators need to act on quickly.
Exploit post-mortems tend to focus on the vulnerability. This investigation focused on the money, because the money is what victims can still hope to see again, and the laundering path is what links one incident to the next.
October 2025
Exploit drains roughly $28M from Bittensor users; stolen funds begin moving.
October 15, 2025
Investigation published tracing consolidation of the proceeds and flagging deposit addresses at reachable services.
