Arkham Intelligence says the wallet cluster it links to the CryptoBilis Ledger drainer moved $13.84 million in the 48 hours before its October 29 update. Arkham also puts the suspected stolen holdings at $95.35 million across 1,486 addresses, but that remains Arkham’s tracing estimate, not a loss total confirmed by Ledger.
What changed in the last 48 hours is simpler: wallets Arkham associates with the drainer were active again. That does not, by itself, show a cash-out, a recovery, or a final destination for the funds. But it does mean the cluster is still being managed and monitored, rather than sitting idle weeks after the original compromise.
For affected users and security teams, that is the immediate signal to watch. The next meaningful update would be a clearer destination for the funds, a confirmed recovery, or public clarification from Ledger on Arkham’s estimate.