{"id":71445,"date":"2026-04-21T07:57:47","date_gmt":"2026-04-21T07:57:47","guid":{"rendered":"https:\/\/crowdfundjunction.com\/blog\/onchain-analysts-flag-justin-sun-linked-wallets-274-million-usdt-exit-from-aave-minutes-after-rseth-freeze\/"},"modified":"2026-04-21T07:57:47","modified_gmt":"2026-04-21T07:57:47","slug":"onchain-analysts-flag-justin-sun-linked-wallets-274-million-usdt-exit-from-aave-minutes-after-rseth-freeze","status":"publish","type":"post","link":"https:\/\/crowdfundjunction.com\/blog\/onchain-analysts-flag-justin-sun-linked-wallets-274-million-usdt-exit-from-aave-minutes-after-rseth-freeze\/","title":{"rendered":"Onchain Analysts Flag Justin Sun-Linked Wallet&#8217;s 274 Million USDT Exit From Aave Minutes After rsETH Freeze"},"content":{"rendered":"<p><b>(Originally posted on : Bitcoin News )<\/b><br \/>\n<\/p>\n<div>\n<p><strong>Key Takeaways:<\/strong><\/p>\n<ul>\n<li>A wallet linked to Justin Sun pulled 274 million <span>USDT<\/span> from Aave 21 minutes after the rsETH market was frozen.<\/li>\n<li>The withdrawal coincided with KelpDAO\u2019s 292 million exploit on April 18, which forced Aave to halt rsETH markets.<\/li>\n<li>Sun has not responded; onchain analysts say the 21-minute window raises questions about <span>decentralized finance<\/span> ( <span>DeFi<\/span>) position monitoring.<\/li>\n<\/ul>\n<h2>A Swift Exit From Aave Puts Justin Sun Back Under the Microscope<\/h2>\n<p>The wallet in question is the HTX Recovery address, an onchain account associated with Sun\u2019s exchange HTX. According to <a href=\"https:\/\/twitter.com\/WuBlockchain\/status\/2046439354135134403\" target=\"_blank\" rel=\"noopener noreferrer\">Wu Blockchain<\/a>, Aave\u2019s rsETH and wrsETH markets were frozen at 18:52 UTC on April 18. The 274 million <span>USDT<\/span> withdrawal was completed between 19:12 and 19:17 UTC, a five-minute execution window analysts say suggests pre-positioned transactions or automated triggers.<\/p>\n<figure id=\"attachment_807909\" aria-describedby=\"caption-attachment-807909\" style=\"width:747px\" class=\"wp-caption alignnone\"><figcaption id=\"caption-attachment-807909\" class=\"wp-caption-text\">Image source: X<\/figcaption><\/figure>\n<p>The rsETH market freeze was <a href=\"https:\/\/news.bitcoin.com\/incident-report-llamarisk-aave-service-providers-detail-kelp-rseth-hack-across-ethereum-and-arbitrum-markets\/\"><span style=\"font-weight:400\">triggered<\/span><\/a> by the KelpDAO exploit, in which an attacker drained approximately 292 million from the protocol via a Layerzero bridge vulnerability. The attacker used stolen rsETH as collateral on Aave to borrow ether, prompting the protocol to freeze the affected markets as a containment measure.<\/p>\n<p>Wu <span>Blockchain<\/span> described the HTX Recovery wallet\u2019s exit as \u201cswift,\u201d noting the withdrawal came within the 21-minute window between the freeze and the transaction timestamp. Whether the move was a response to the unfolding exploit, a reaction to the freeze notification, or routine portfolio risk management has not been established. Sun has not issued a public statement.<\/p>\n<p>In the 24 hours following the exploit, <span>whales<\/span> <a href=\"https:\/\/x.com\/lookonchain\/status\/2045681304151437610\" target=\"_blank\" rel=\"noopener noreferrer\">pulled<\/a> more than 5.4 billion from Aave, pushing the protocol\u2019s <a href=\"https:\/\/branch.wallet.bitcoin.com\/news-contextual-eth\" class=\"lar_link lar_link_outgoing\" target=\"_blank\" rel=\"noopener noreferrer\">ETH<\/a> utilization rate to 100% and effectively trapping remaining depositors\u2019 funds, according to data flagged by Wu <a href=\"http:\/\/www.bitcoin.com\/get-started\/what-is-a-blockchain\/\" class=\"lar_link lar_link_outgoing\" target=\"_blank\" rel=\"noopener noreferrer\">Blockchain<\/a> and Lookonchain.<\/p>\n<p><span style=\"font-weight:400\">Sun has previously moved large <a href=\"http:\/\/www.bitcoin.com\/get-started\/what-is-defi-decentralized-finance\/\" class=\"lar_link lar_link_outgoing\" target=\"_blank\" rel=\"noopener noreferrer\">DeFi<\/a> positions during periods of market stress. In March 2023, wallets attributed to him shifted significant USDC and DAI holdings off Aave during the Silicon Valley Bank depegging episode, drawing intense scrutiny from the community. <\/span><\/p>\n<p> <!-- --> <\/p>\n<p>The 274 million <a href=\"https:\/\/buy.bitcoin.com\/?utm_source=News\" class=\"lar_link lar_link_outgoing\" target=\"_blank\" rel=\"noopener noreferrer\">USDT<\/a> withdrawal stands as one of the largest single exits from Aave recorded during the April 18 incident window. Aave\u2019s risk service provider Llamarisk has since <a href=\"https:\/\/governance.aave.com\/t\/rseth-incident-report-april-20-2026\/24580\" target=\"_blank\" rel=\"noopener noreferrer\">published<\/a> a formal incident report detailing potential bad debt scenarios for rsETH depositors.<\/p>\n<\/div>\n<p><script async src=\"\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><br \/>\n<br \/><a href=\"https:\/\/news.bitcoin.com\/justin-sun-linked-wallet-274-million-usdt-aave-kelpdao\/\">Source link <\/a><br \/>\n<br \/><\/p>\n","protected":false},"excerpt":{"rendered":"<p>(Originally posted on : Bitcoin News ) Key Takeaways: A wallet linked to Justin Sun pulled 274 million USDT from Aave 21 minutes after the rsETH market was frozen. The withdrawal coincided with KelpDAO\u2019s 292 million exploit on April 18, which forced Aave to halt rsETH markets. Sun has not responded; onchain analysts say the [&hellip;]<\/p>\n","protected":false},"author":3947362404,"featured_media":71446,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0},"categories":[32],"tags":[],"_links":{"self":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/posts\/71445"}],"collection":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/users\/3947362404"}],"replies":[{"embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/comments?post=71445"}],"version-history":[{"count":0,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/posts\/71445\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/media\/71446"}],"wp:attachment":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/media?parent=71445"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/categories?post=71445"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/tags?post=71445"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}