Early on Sunday, the person responsible for the $600 million FTX exploit began exchanging millions of dollars worth of ether to Ren Bitcoin (renBTC), a token that represents bitcoin on other blockchains. According to blockchain data, the hacker transferred over 5,000 ether to a new wallet at 7:27 UTC on Sunday. A total of 35,000 ether was then transferred to that wallet in three separate transactions. On-chain analysis of the new wallet reveals that the exploiter then began converting ether to renBTC using the decentralised exchange aggregator 1inch. The first such transaction involved the conversion of 4,000 ether to wrapped bitcoin (wBTC), another bitcoin representative token, and then to renBTC. According to blockchain data, the exploiter continued to convert ether to renBTC over several transactions.