In brief
- Ciphertrace is tracking the stolen Bitcoin from the Twitter hack last week.
- Hackers have shifted the funds through coin mixers, exchanges, and gambling sites to obscure its movement.
- With the community's eyes on the funds, it's going to be difficult to cash out.
Last week hackers hijacked Twitter, taking control of the accounts of several high-profile individuals. But rather than start World War 3, they elected to run a simple Bitcoin scam—swindling a total of 12.5 Bitcoin ($120,000).
Now, the Bitcoin is on the move, and here’s how the hackers are trying to escape with their spoils.
According to blockchain analytics firm Ciphertrace, the hackers are using a combination of Bitcoin mixing services, gambling sites, exchanges—and even defunct addresses—in an attempt to both hide the money and turn it into other currency.
The first port of call was a Bitcoin mixing service. These let people swap their Bitcoin for someone else’s Bitcoin—while obscuring the identities of both parties. They’re often used to “clean” stolen Bitcoin.

Only $120,000 in Bitcoin: Twitter hack could have been much worse
Hackers compromised the personal accounts of over 25 prominent and influential Twitter users yesterday, including US Presidential nominee Joe Biden and former US President Barack Obama, to perpetuate a Bitcoin “giveaway” scam. But for all their efforts—like infiltrating a billion-dollar company by allegedly bribing staff, according to Vice—the yet-unidentified hackers have little to show. In all, they extracted just 12.5 Bitcoin (about $120,000 at current rates), which by all means is a lot of m...
On July 16, one day after the hack, attackers sent 2.89 Bitcoin (roughly 22.5% of the total haul) to Wasabi—a privacy-centric Bitcoin wallet with a built-in mixer. It’s a very effective way of stopping any observers from following the money trail.
A day later, a further 0.1022 BTC moved into another Bitcoin obfuscator, Chipmixer. Ciphertrace was unable to follow the Bitcoin any further.

Over the next few days, Ciphertrace tracked piecemeal amounts of the rest of the scammed funds to peer-to-peer exchanges and gambling sites. Just over 1 Bitcoin—roughly 8.5% of the Twitter plunder—was sent to an unnamed Singapore-based crypto exchange.

An unspecified portion of Bitcoin then traveled to an inactive Binance cold wallet.
"CipherTrace believes that this transaction was not made to cash out funds, but rather to troll," reads the reports. The idea being that the hackers know the funds are being watched and they just want to confuse or infuriate anyone watching.
Who hacked Twitter?
Per a report from the New York Times, contrary to conspiracies of elaborate schemings from a rival nation, the hack was purportedly initiated by a group of youths. The alleged adolescent attackers told the Times how they managed to gain access via information left on Twitter's internal Slack channel.

5 key things we learned from the Twitter hack
Twitter saw a hack on an unprecedented scale on Wednesday when scammers targeted multiple high-profile accounts, sending a volley of tweets extorting Bitcoin from the 346 million followers of Barack Obama, Apple, Uber, Joe Biden, Elon Musk, and 20 others. The tweets promised users that the account holders would double the donations they sent to the Bitcoin addresses provided—a classic scam. The hackers walked away with around $120,000, but, more importantly, they left some key lessons for social...
Since then the person, known as Kirk, who had the access to Twitter has since disappeared.