---
title: "Crypto investigators flag suspected $106M theft and $786K Solana bot drain"
description: "Cointelegraph reported that a European entity may have lost $106 million from exchange accounts, while a wallet tied to a Solana arbitrage bot may have lost…"
language: en
canonical: "https://whycoinmoves.com/en/events/solana-crypto-investigators-flag-suspected-106m-0bf2b31f6dd88d"
published: 2026-11-02T21:23:57.000Z
updated: 2026-11-02T22:24:59.000Z
indexable: true
---

# Crypto investigators flag suspected $106M theft and $786K Solana bot drain

Cointelegraph reported that a European entity may have lost $106 million from exchange accounts, while a wallet tied to a Solana arbitrage bot may have lost…

Attributed sources: [Cointelegraph](<https://cointelegraph.com/news/zachxbt-flags-suspected-106m-crypto-theft-as-solana-bot-faces-possible-786k-drain>)

## Key facts

Cointelegraph reported that a European entity may have lost $106 million from exchange accounts, while a wallet tied to a Solana arbitrage bot may have lost $786,000. The amounts were characterized as suspected losses in coverage attributed to crypto investigators.
Evidence strength: Single source, 1 publisher group(s) (Cointelegraph).
After site detection, observed returns were 5 minutes: -0.11% (difference from BTC +0.01 pts; Nov 2, 2026, 21:23 → Nov 2, 2026, 21:28, UTC; Gate · USDT); 1 hour: +0.55% (difference from BTC +0.38 pts; Nov 2, 2026, 21:23 → Nov 2, 2026, 22:23, UTC; Gate · USDT)
In the preceding 30 days, the 99th percentile of absolute hourly returns was 1.94% (OKX · USDT; cutoff Nov 2, 2026, 21:23, UTC).

## Returns after site detection

| Window | Return | BTC | Difference from BTC | Actual sampled interval (UTC) | Source |
| --- | --- | --- | --- | --- | --- |
| 5 minutes | -0.11% | -0.12% | +0.01 pts | Nov 2, 2026, 21:23 → Nov 2, 2026, 21:28 | Gate · USDT |
| 1 hour | +0.55% | +0.16% | +0.38 pts | Nov 2, 2026, 21:23 → Nov 2, 2026, 22:23 | Gate · USDT |

## Historical hourly baseline

| Metric | Value |
| --- | --- |
| Coverage | 100.0% (720/720) |
| Median absolute hourly return | 0.27% |
| 99th percentile of absolute hourly returns | 1.94% |
| BTC beta | 1.44 |
| Source / cutoff (UTC) | OKX · USDT / Nov 2, 2026, 21:23 |

## Claims and open questions

- Crypto investigators flagged a suspected theft in which a European entity may have lost $106 million from exchange accounts, Cointelegraph reported.
- A wallet associated with a Solana arbitrage bot may have lost another $786,000, according to Cointelegraph.
- Which exchange accounts held the $106 million and which exchange, if any, has issued a notice or confirmed the loss?
- What on-chain evidence identifies the Solana arbitrage bot wallet and the $786,000 transfer, and would the bot's operator or an investigator confirm it?

## Source evidence

- [Crypto investigators flag suspected $106M theft, $786K Solana bot drain](<https://cointelegraph.com/news/zachxbt-flags-suspected-106m-crypto-theft-as-solana-bot-faces-possible-786k-drain>) — Cointelegraph; published Nov 2, 2026, 21:16; received Nov 2, 2026, 21:23 (UTC).


## Recent SOL events and market reactions

- [Binance hackers begin swapping stolen Solana tokens for Bitcoin, Chainalysis says](<https://whycoinmoves.com/en/events/solana-binance-hackers-begin-swapping-stolen-7af14015c914e2>) — Published Nov 2, 2026, 12:40 (UTC) · Single source (1 publisher) · Security · 5m -0.11% / 1h +0.65%
- [Solana Agave validator: v4.4.0 released](<https://whycoinmoves.com/en/events/solana-solana-agave-validator-v4-4-6e1b6c039c20af>) — Published Oct 28, 2026, 20:35 (UTC) · Official source (1 publisher) · Project updates · 5m +0.08% / 1h -0.15% / 24h -1.03%
- [Polygon brings its stablecoin payments stack to Solana](<https://whycoinmoves.com/en/events/solana-polygon-extends-its-stablecoin-payments-c9efd85654e350>) — Published Oct 29, 2026, 13:01 (UTC) · Multiple publishers (3 publishers) · General news · 5m -0.11% / 1h -0.04% / 24h -3.94%
- [Solana Foundation adds Boris Johnson and Martin Gilbert to Breakpoint 2026 lineup](<https://whycoinmoves.com/en/events/solana-solana-breakpoint-2026-adds-revolut-072e602a1054ad>) — Published Oct 26, 2026, 22:52 (UTC) · Official source (1 publisher) · General news · 5m -0.19% / 1h -0.54% / 24h +2.79%
- [Solana changelog lists Agave v4.3.2 and Firedancer v26.10.4 releases](<https://whycoinmoves.com/en/events/solana-solana-changelog-october-22-2026-fb3f84c7466deb>) — Published Oct 23, 2026, 01:09 (UTC) · Official source (1 publisher) · General news · 5m -0.07% / 1h +0.34% / 24h -1.42%
- [Full coin archive](<https://whycoinmoves.com/en/coins/solana>)

## Research for this archive

- [Why is crypto moving? How to check the evidence](<https://whycoinmoves.com/en/research/how-to-check-why-crypto-is-moving.md>)
- [Altcoin beta to Bitcoin: BTC, ETH, SOL and DOGE hourly returns](<https://whycoinmoves.com/en/research/hourly-returns-and-bitcoin-beta.md>)
- [Do XRP and Solana ETF flows move the price? First-year data](<https://whycoinmoves.com/en/research/xrp-solana-etf-flows-and-price.md>)
- [Perpetual funding rates and annualized yield: a 2025 comparison](<https://whycoinmoves.com/en/research/funding-rates-versus-investor-returns.md>)

Evidence levels describe source coverage, not the probability that a report is true. Price moves and their timing cannot establish a cause; minute samples show an observed interval and alert thresholds are heuristics. Explanations are model-assisted, with citations and figures checked. Source titles stay in their original language; full articles are not republished. [Methods and limitations](<https://whycoinmoves.com/en/methodology>)
