At 21:49 UTC on Oct 29, 7,772,977,017,415 PEPE moved from the main Binance-hack wallet 0x5227…2f8c to a new unknown wallet 0x600d…8298, flagged by Whale Alert at about $37.48M, Arkham reading about $39.48M at transfer time.
Blockaid attributed the wider Binance 14 drain to an EIP-7702 attack, saying the attacker sprayed 50 auths in one type-4 tx and landed one nonce, upgrading the hot wallet to unverified sweeper implementation 0x63e8…6fae whose only hardcoded operator is 0x7c86…5ca0, in Blockaid. That operator is labeled as a Tornado Cash recipient with only about 1.17 ETH left.
The receiver immediately started dumping on the Uniswap V2 PEPE/WETH pool 0xa43f…c9f via swapExactTokensForETHSupportingFeeOnTransferTokens, with over a dozen sales from about 7.3B to 181B PEPE each on Oct 29 around 22:19 to 22:51 UTC, including about 180.9B, 132.4B and 46.4B PEPE lots. Rickler Feed reported the exploiter started dumping on Uniswap and still held about 7.7T PEPE (about $35M), so only a small fraction was sold on-chain at that point while PEPE traded near $0.0000043 and down about 12 to 14% in 24h.