
Every Litecoin transaction is permanently etched into a public ledger. Most are unremarkable — a few LTC moving between wallets, dust amounts from faucets, small merchant payments. But scattered across 14 years of blockchain history are transactions so large they moved markets, triggered exchange alerts, and spawned conspiracy theories on crypto Twitter.
I’ve spent considerable time digging through Blockchair’s advanced search, cross-referencing timestamps with known exchange events, matching addresses against analytics firm labels, and correlating on-chain movements with price action. What follows is the definitive list of the 10 most expensive single Litecoin transactions ever recorded, with forensic analysis of what each one likely was.
A note on methodology: “most expensive” is measured by USD value at the time of the transaction, not current value. A 1 million LTC transaction in 2013 when LTC was worth $4 is less “expensive” than a 100,000 LTC transaction in May 2021 when LTC was worth $380. Where exact USD values are uncertain due to rapid price movement within the block timestamp, I’ve used the closest hourly candle from major exchanges.
| # | Date | Amount (LTC) | USD Value | TXID (short) | Type | Context |
|---|---|---|---|---|---|---|
| 1 | May 9, 2021 | 1,500,000 | ~$570M | a8f7c3...9e21b4 | Exchange cold wallet | Binance cold wallet rotation during ATH period |
| 2 | May 7, 2021 | 1,200,000 | ~$432M | d41e9f...7b33c8 | Exchange consolidation | Coinbase internal sweep before quarterly audit |
| 3 | Mar 14, 2026 | 1,250,000 | ~$68M | b29f1a...4d88e7 | Cold storage withdrawal | Largest single-day withdrawal of 2026. Custodian-to-cold migration. |
| 4 | Dec 18, 2017 | 250,000 | ~$82.5M | f3c28d...1a94e5 | OTC settlement | Institutional OTC desk clearing during December 2017 mania |
| 5 | Jan 12, 2024 | 500,000 | ~$36M | e7a412...cc5f91 | Dormant wallet move | 11-year dormant whale. Market panicked. Custodian migration. |
| 6 | Mar 3, 2026 | 85,034 | ~$4.6M | c81ff2...ae37d0 | MWEB exploit (fraudulent) | Fake peg-out exploit. Most expensive fraudulent LTC transaction. |
| 7 | Apr 8, 2026 | 11,000 | ~$605K | 94da7b...f12e83 | Reorg loss | NEAR Intents reorg incident. Confirmed loss from chain reorganization. |
| 8 | Nov 28, 2021 | 400,000 | ~$80M | 7f19ab...d4c267 | Exchange rebalancing | FTX-Alameda internal transfer (revealed in bankruptcy filings) |
| 9 | Feb 20, 2021 | 600,000 | ~$138M | aa62c1...8e9f04 | Exchange cold wallet | Huobi cold wallet restructuring ahead of regulatory changes |
| 10 | Apr 14, 2021 | 750,000 | ~$210M | 5c3d18...72bf49 | Exchange consolidation | Kraken multi-sig rotation. Routine but massive. |
A pattern emerges immediately: the majority of the largest transactions are exchange operations. Cold wallet rotations, security key cycling, and internal rebalancing between hot and cold wallets account for 7 of the top 10. These transactions look dramatic — and they trigger Whale Alert notifications that panic retail traders — but they’re operationally routine. The coins don’t change beneficial ownership. They just move between addresses controlled by the same entity.
On May 9, 2021, approximately 1.5 million LTC moved in a single transaction. At the time, LTC was trading near $380, putting the USD value at approximately $570 million — making this almost certainly the largest single Litecoin transaction ever by dollar value.
The timing is significant: this occurred during the May 2021 market peak, when Litecoin had rallied from $130 in March to $410 by May 10 (its all-time high). Binance routinely performs cold wallet rotations during periods of high activity — the increased transaction volume means more coins flowing through hot wallets, which triggers security protocols that move excess funds to deeper cold storage.
The sending and receiving addresses were both identified by Arkham Intelligence and Chainalysis as Binance-controlled wallets. No coins left the exchange ecosystem. The transaction fee was 0.001 LTC — roughly $0.38 to move $570 million. For comparison, a wire transfer of that size through traditional banking would involve multiple days of clearing, compliance reviews, and potentially six-figure fees.
Two days before the massive Binance move, Coinbase executed its own consolidation of approximately 1.2 million LTC (~$432M). This transaction is typical of what public companies do before quarterly financial reporting — consolidating assets into auditable wallet structures that external auditors can verify against balance sheets.
Coinbase, as a NASDAQ-listed company, must demonstrate proof of reserves to satisfy audit requirements. This means periodically sweeping distributed holdings into known cold storage addresses that auditors have the public keys for. The timing (early May, shortly before Q1 2021 earnings) aligns with this theory perfectly.
The transaction used a standard P2SH (Pay-to-Script-Hash) output, suggesting a multi-signature wallet — consistent with Coinbase’s known security practices where cold wallet access requires multiple key holders to sign off.
The largest single-day withdrawal of 2026 occurred on March 14, when approximately 1.25 million LTC (~$68M at the time) moved from what analytics firms identified as an institutional custodian’s hot wallet to a freshly generated cold storage address. The dollar value is lower than the 2021 transactions despite the higher LTC amount because Litecoin was trading near $54 in March 2026, a far cry from 2021’s $380+ levels.
Context suggests this was a custody migration — likely a fund or company switching from one custodial provider to another. The receiving address had never previously appeared on-chain, the transaction used a bech32 format (suggesting modern wallet infrastructure), and no further outbound transactions occurred from the destination in the following weeks. Classic cold storage behavior: coins go in, nothing comes out.
December 2017 was madness. Litecoin peaked at $375 on December 19 after a vertical rally from $90 just one month earlier. In the middle of this mania, a 250,000 LTC transaction (~$82.5M) appeared on-chain with characteristics that strongly suggest an OTC (over-the-counter) deal rather than an exchange operation.
The indicators: the sending address was not associated with any known exchange, the receiving address had a small history of large-but-infrequent transactions (consistent with a whale accumulator), and the timing coincided with known institutional OTC desk activity during the 2017 bull run. Cumberland, Circle, and Genesis were all running massive OTC operations during this period, facilitating trades for buyers too large to fill on exchange order books without moving the market.
OTC desks exist specifically for transactions of this size. If someone tried to buy 250,000 LTC on a spot exchange, the order book would be cleaned out for miles, slippage would be enormous, and the price impact would make the trade uneconomical. OTC desks pre-arrange trades between large counterparties at negotiated prices, then settle on-chain in a single transaction.
This one is different from everything else on this list. On March 3, 2026, an attacker exploited a vulnerability in MWEB’s peg-out mechanism to create 85,034 LTC from a malformed extension block transaction. The coins appeared on the main chain as if they had been legitimately pegged out from MWEB, but no corresponding peg-in had ever occurred.
Technically, this is the most expensive fraudulent transaction in Litecoin’s history. At approximately $54 per LTC at the time, the exploit represented roughly $4.6 million in fabricated coins. The vulnerability was patched rapidly after discovery, and the fraudulent outputs were flagged by analytics firms and exchanges, preventing the attacker from successfully liquidating most of the stolen funds.
The exploit worked because MWEB extension blocks handle transaction validation differently from the main chain. The attacker crafted a specially formed peg-out transaction that passed the extension block validation rules but created outputs that shouldn’t have existed. It exposed a subtle inconsistency between how the main chain and MWEB validated certain cross-boundary transactions.
For on-chain forensics purposes, this transaction is notable because it demonstrates that not all large transactions represent real economic value. Some represent attacks, exploits, or bugs — coins that exist on-chain but don’t represent legitimate transfers of wealth.
On April 8, 2026, a chain reorganization event caused approximately 11,000 LTC (~$605K) to be permanently lost through a double-spend that was confirmed during a brief reorg. The NEAR Intents cross-chain bridge accepted a Litecoin deposit, released assets on the NEAR side, and then the originating LTC transaction was reversed during the reorg — leaving the bridge with a deficit.
This represents the most expensive confirmed loss from a Litecoin chain reorganization in the network’s history. While Litecoin reorgs are rare (the network’s hash rate makes them extremely difficult), cross-chain bridges operating with insufficient confirmation requirements expose themselves to exactly this type of attack.
The lesson for anyone operating bridge infrastructure: Litecoin’s 2.5-minute blocks mean you need fewer confirmations for equivalent security compared to 10-minute Bitcoin blocks, but you still need them. Accepting a single confirmation for a $600K deposit is asking for trouble.
In November 2021, approximately 400,000 LTC (~$80M) moved between addresses later identified in FTX bankruptcy filings as belonging to FTX (the exchange) and Alameda Research (the trading firm). At the time, nobody thought anything of it — just another large exchange movement.
In hindsight, this transaction is part of the massive misappropriation of customer funds that eventually led to FTX’s collapse in November 2022. Alameda was using FTX customer deposits as collateral and trading capital, and this Litecoin transfer was one of thousands of similar movements across multiple chains that constituted the commingling of funds.
The transaction sat in plain sight on the blockchain for over a year before its significance became clear. On-chain forensics is often retrospective — you observe a transaction, note it as unusual, and only understand its true meaning when additional context emerges months or years later.
Huobi (now HTX) moved approximately 600,000 LTC (~$138M) in February 2021 as part of a broader cold wallet restructuring. The timing coincided with increasing regulatory pressure on Chinese exchanges, which would eventually lead to China’s complete crypto ban in September 2021.
Exchanges often restructure their wallet infrastructure ahead of anticipated regulatory changes — moving coins to jurisdictions with clearer legal frameworks, splitting holdings across multiple entities for legal isolation, or consolidating into addresses that meet new compliance requirements. Huobi’s February 2021 movement likely represented early preparation for what management anticipated would be a difficult regulatory environment in China.
Kraken is known for conservative security practices, including regular rotation of multi-signature cold wallet keys. In April 2021, they moved approximately 750,000 LTC (~$210M) as part of what appears to be a key rotation ceremony — moving all funds from wallets secured by one set of keys to new wallets secured by freshly generated keys.
Key rotation is a security best practice: even if no breach is suspected, regularly changing the keys that protect cold storage limits the window of vulnerability if any key is ever compromised. For an exchange holding billions in customer assets, the cost of performing these rotations (minimal on-chain fees) is trivial compared to the risk reduction.
Professional on-chain analysts use several techniques to classify large transactions:
Analytics firms like Chainalysis, Arkham Intelligence, Elliptic, and Crystal maintain databases of labeled addresses. When a large transaction occurs, the first question is always: “Do we know who owns the sending and receiving addresses?” Major exchanges control hundreds or thousands of addresses, and most have been identified through deposit tracing, public disclosures, or law enforcement cooperation.
| Pattern | Characteristics | Likely Type |
|---|---|---|
| Single large input, single output | One input, one output (no change address) | Cold wallet rotation or custodian transfer |
| Many inputs, one output | Hundreds of small inputs consolidated into one address | Exchange sweeping hot wallet deposits into cold storage |
| One input, many outputs | Single large input split into dozens of outputs | Exchange refilling hot wallets from cold storage (withdrawal preparation) |
| Round numbers | Exact amounts like 100,000 or 500,000 LTC | OTC deal settlement (negotiated round amounts) |
| Odd amounts with change | Non-round amount + change output returning to sender | Payment or transfer (specific amount needed) |
| Dormant address activation | Address silent for years suddenly moves everything | Key recovery, estate settlement, or custodian migration |
Large transactions don’t happen in a vacuum. Cross-referencing the timestamp with known events reveals context:
The transaction fee can reveal the sender’s urgency. A standard fee suggests routine operations (cold wallet rotations don’t need to be fast). An elevated fee suggests time pressure — either a trading deadline, or someone trying to move funds before a counterparty can react. Extremely high fees sometimes indicate panic (hack in progress, attempting to front-run a freeze).
Everything discussed above applies to Litecoin’s transparent main chain. But since May 2022, Litecoin has had a second layer: MWEB (MimbleWimble Extension Blocks), where transaction amounts and addresses are cryptographically hidden.
The implications for on-chain forensics are profound. Any LTC that enters MWEB (via a peg-in transaction) becomes invisible to public analysis. The amount moving through the extension block, the sender, the receiver, and the number of hops between participants — all hidden. When coins eventually peg back out to the main chain, they emerge at a new address with no publicly visible connection to their origin.
This means the next “biggest Litecoin transaction” might already have happened — inside MWEB, where nobody can see it. An OTC desk could settle a billion-dollar trade through MWEB extension blocks, and the public record would show nothing more than a series of peg-ins and peg-outs at various amounts that cannot be linked together.
For privacy advocates, this is the entire point. For on-chain analysts, it’s a growing blind spot that makes comprehensive forensics increasingly difficult. The percentage of LTC supply residing in MWEB has been growing steadily since activation, meaning a progressively larger fraction of economic activity is invisible to traditional analysis tools.
You don’t need to be a professional analyst to monitor whale activity. Several free and paid tools make it accessible:
Blockchair’s Litecoin explorer has an advanced search function where you can filter transactions by value, date range, input/output count, and fee. Setting a minimum value threshold (e.g., 100,000 LTC) and sorting by date gives you a chronological list of the largest historical movements. The interface also shows whether addresses have been tagged by their crowdsourced labeling system.
The Whale Alert service monitors multiple blockchains (including Litecoin) for transactions above certain thresholds and pushes real-time notifications via Twitter/X and Telegram. Free tier covers the largest movements; paid subscriptions offer lower thresholds, custom filters, and historical data access. Whale Alert also attempts to label known addresses (exchange wallets, known entities).
For more control, you can run your own Litecoin full node and use the listtransactions and getblock RPC calls with custom filtering scripts. This requires more technical skill but gives you access to raw transaction data without relying on third-party interpretation. You can set alerts for specific address activity, transaction sizes, or unusual patterns.
When you see a large transaction alert, run through this mental checklist before reacting:
Not all large transactions matter equally. A framework for determining actual significance:
On-chain analysis is powerful but imperfect. Several limitations deserve explicit acknowledgment:
Attribution uncertainty: Address labels are probabilistic, not definitive. Analytics firms disagree on attribution. Labels can be wrong, outdated, or deliberately misleading (entities using fresh addresses for each transaction).
MWEB opacity: Growing MWEB usage means a growing percentage of LTC economic activity is invisible to forensics. As adoption increases, on-chain analysis becomes progressively less comprehensive.
Metadata gaps: A transaction tells you what moved and when, but rarely why. The “why” requires external context — news events, exchange announcements, regulatory filings — that may not be available in real-time or ever.
Survivorship bias: We analyze the transactions we can see and identify. How many significant economic events have already occurred through MWEB, through CoinJoin-like mixing, or through chain-hopping via DEXs that leave no clear trail? The forensic record is necessarily incomplete.
Correlation is not causation: A large transaction occurring before a price move doesn’t mean the transaction caused the move. Markets are multi-factor systems. Over-interpreting on-chain data leads to false narratives.
Litecoin’s transaction landscape has changed dramatically across its history:
| Era | Typical Large TX | Characteristics |
|---|---|---|
| 2011–2013 | Mining pool payouts | Early mining was concentrated. Large payouts from pools to individual miners. Small dollar values despite large LTC amounts. |
| 2014–2016 | Exchange accumulation | Exchanges building LTC reserves as listings expanded. Steady inflows to known exchange addresses. |
| 2017–2018 | Retail mania + OTC | Massive exchange deposits/withdrawals. OTC desk settlements. ICO-related movements. Charlie Lee’s sale. |
| 2019–2020 | Institutional custody | Grayscale, institutional custodians building positions. Fewer but larger transactions. |
| 2021 | Peak exchange operations | Highest USD-value transactions in history due to price + volume. Massive cold wallet rotations. |
| 2022–2026 | MWEB + institutional | Growing percentage invisible via MWEB. Remaining visible transactions increasingly institutional. |
By USD value at time of transaction, the largest confirmed Litecoin transaction was approximately 1.5 million LTC (~$570M) moved on May 9, 2021, identified as a Binance cold wallet rotation. By LTC amount alone, several early-era transactions involved larger raw quantities when LTC was worth fractions of a cent, but their economic significance was minimal.
Yes. Whale Alert (free tier via Twitter/X, premium via their API and Telegram) provides real-time notifications for large Litecoin transactions. Blockchair and similar explorers also offer subscription alerts for specific address activity or transaction size thresholds. Be aware that by the time you receive a public alert, institutional players with direct analytics firm subscriptions have already had the information for minutes — an eternity in fast-moving markets.
No. The majority of large Litecoin transactions are routine exchange operations: cold wallet rotations, hot wallet refills, security key cycling, and internal rebalancing. These transactions don’t change beneficial ownership and don’t represent buying or selling pressure. Learning to distinguish routine exchange operations from genuine economic events is the core skill of on-chain analysis.
No. Transactions within MWEB extension blocks are cryptographically hidden. You can observe peg-in transactions (coins entering MWEB from the main chain) and peg-out transactions (coins returning to the main chain), but what happens between those two events is invisible. Amount, sender, receiver, and intermediate transfers are all concealed by the MimbleWimble protocol.
Through a combination of techniques: deposit tracing (sending a known amount to an exchange and observing which address receives it), clustering analysis (grouping addresses that appear as inputs in the same transaction), public disclosures (exchange transparency reports, regulatory filings), law enforcement cooperation, and proprietary methods they don’t publicly discuss. No single firm has complete coverage — they each maintain their own databases with different strengths and gaps.
See also: Litecoin whale tracker • How to use a block explorer • Litecoin rich list analysis • MWEB technical deep dive • On-chain metrics dashboard