Attacker Moves Stolen Funds to Buy 4,800 ETH After Two-Month Silence

After a brief period of inactivity, a hacker linked to the $300 million Coinbase hack has resurfaced.  The hacker acquired 4,863 ETH, worth around $12.55 million, sparking anticipations about their next move. What’s behind this move?

Coinbase Hacker Acquires $12.55M ETH

According to Lookonchain data, the Coinbase hacker who stole $300 million from the platform has recently made a bold move. Earlier today, the hacker bought 4,863 ETH ($12.55M) at a price of $2,581 per token.

Coinbase hacker buys ETH
Source: X; Coinbase Hacker Buys ETH

The transaction follows a significant liquidation event in May, where the entity offloaded 26,762 ETH, valued at $69.25 million, at $2,588 per ETH. This new transaction coincides with a bullish trend in the Ethereum price as the token is trading at $2,562, up 1.9%. Over the past week and month, the token has seen more notable surges of 4.5% and 2.6%.

About two months ago, the same hacker address sold 26,347 ETH, obtained through THORChain, for $68.18 million in DAI at an average price of $2,587. Now, they’ve made a new purchase, likely as part of a strategy to convert stablecoins back into ETH.

As reported by CoinGape in May 2025, Coinbase faced a significant data breach, resulting in the loss of sensitive data belonging to high-profile users like Sequoia Capital’s Managing Partner, Roelof Botha. According to Coinbase, a hacker compromised the data of 97,000 users by bribing a customer support employee based outside the United States.

What’s Driving the Hacker’s Latest ETH Buy?

Notably, the Coinbase hacker’s ETH purchase has raised eyebrows, particularly regarding their motive. As this move comes amid the positive crypto market trend, the community believes that the hacker remains bullish, especially on Ethereum. An analyst on X wrote, “Not the usual average hacker. This dude knows not only how to hack but also how to move in crypto world.”

The community members also humorously underscored the hacker’s clever strategy, adding that their risk management skills are better than many in the crypto space. They stole $300 million, potentially profited from the subsequent market pump, and now they’re buying back before a potential uptrend.

coingape

Nynu V Jamal

Nynu V Jamal is a Senior Journalist at CoinGape. She boasts more than 3 years of experience in content writing, with expertise in crypto and blockchain. She has contributed to platforms like CoinEdition and CryptoTale, demonstrating her proficiency in navigating the dynamic crypto landscape.

Beyond her journalistic pursuits, Nynu is a literary enthusiast, having served as an Assistant Professor of English Language and Literature. She is a Master’s degree holder in English Literature and a UGC NET qualifier. Her academic background has enabled her to publish research papers on literature, while also nurturing her creative side as a published poet.

Her creative side extends to music, crafts, and art, which she actively explores. Her unique blend of analytical and creative skills allows her to craft engaging stories that captivate audiences. Stay updated with Nynu on LinkedIn

Why trust CoinGape: CoinGape has covered the cryptocurrency industry since 2017, aiming to provide informative insights to our readers. Our journalists and analysts bring years of experience in market analysis and blockchain technology to ensure factual accuracy and balanced reporting. By following our Editorial Policy, our writers verify every source, fact-check each story, rely on reputable sources, and attribute quotes and media correctly. We also follow a rigorous Review Methodology when evaluating exchanges and tools. From emerging blockchain projects and coin launches to industry events and technical developments, we cover all facets of the digital asset space with unwavering commitment to timely, relevant information.

Investment disclaimer: The content reflects the author’s personal views and current market conditions. Please conduct your own research before investing in cryptocurrencies, as neither the author nor the publication is responsible for any financial losses.

Ad Disclosure: This site may feature sponsored content and affiliate links. All advertisements are clearly labeled, and ad partners have no influence over our editorial content.

Source: https://coingape.com/coinbase-hack-attacker-moves-stolen-funds-to-buy-4800-eth-after-two-month-silence/