The Binance attacker has split $292 million in XRP across six wallets. The six recipient addresses have not shown any outgoing payments, but native XRP cannot be frozen by Ripple, leaving exchanges as a potential interception point.