Ledger–CryptoBilis Investigation: Bitquery Revises Estimated Drains to $102 Million and Retracts a Binance Lead

An important correction now sits alongside the rising loss estimate in the Ledger–CryptoBilis investigation. On October 12, blockchain-analytics firm Bitquery withdrew its earlier suggestion that transfers from four Tron wallets to Binance represented payments connected to the attacker. Those wallets were THORChain vault infrastructure, and the Binance-bound transfers belonged to other users of the swapping service. That lead should no longer appear in an account of the theft as proven attacker activity.　　On the same day, Bitquery raised its estimate of the stolen assets to $102.0 million from 324 wallets across six blockchains. Its October 11 tally had been $93.2 million from 315 wallets. The numerical change is attributable to nine additional Tron wallets whose estimated 8.8 million USDT outflow occurred on October 9 at 20:49 UTC but was discovered later. These figures are Bitquerys analytical estimate, not Ledgers audited or confirmed total victim loss.The October 12 reconciliation　　The arithmetic behind the revision is unusually transparent: 315 previously counted wallets + 9 newly identified wallets = 324; $93.2 million + $8.8 million = $102.0 million, with both values rounded in the analysts reporting. The newly detected transfer is dated October 9, not October 12. WikiBit therefore records it as newly discovered evidence