According to Lookonchain monitoring, the hacker behind the Binance exploit is continuously swapping SOL for BTC. The hacker distributes SOL across multiple wallets to exchange it for USDC, then cross-chains the funds to Ethereum to buy ETH, and finally converts the ETH to BTC via THORChain. Previous reports indicated that the hacker is gradually converting the 970,522 SOL (approximately $95.9 million) stolen from Binance into BTC.