cryptd.in

另类 LinkedIn 适合加密人才

North Korea Is Minting Its Own Meme Coins to Launder Binance Hack Loot

Bitcoin Magazine

North Korea Is Minting Its Own Meme Coins to Launder Binance Hack Loot

North Korean launderers are creating their own worthless meme coins and pushing stolen Binance funds through them so the coins never move directly from one wallet to another, blockchain analytics firm Elliptic 说过 Monday.

Between Nov. 5 and 7, the operators minted at least six new tokens on the NEAR blockchain — named FUK, OLCCL, MEILI, MMLI, DABI and SINU — paired each with NEAR in its own liquidity pool, then bought the tokens with stolen NEAR and sold them back out through a second set of wallets. About 117,000 NEAR, or roughly $430,000, passed through the six tokens, Elliptic wrote.

The trail sits inside the broader laundering of the Oct. 29 Binance theft, which the exchange has put at $6.34 billion and which the FBI has attributed to North Korea’s TraderTraitor group. Elliptic’s wider update now puts roughly 3,000 BTC — about $225 million — in new bitcoin addresses converted from other stolen assets, while about 11.8 million NEAR, or $43.7 million, from the theft has still not moved.

“Most people think of meme tokens as joke coins whose prices rise and fall on hype,” Elliptic co-founder and chief scientist Dr. Tom Robinson wrote. “North Korea’s launderers have found a different use for them.”

How the homemade token trick works

The technique is a four-step hop. The North Korea launderers create a token with a public launch tool, open a liquidity pool pairing it with a real asset such as NEAR or a stablecoin, buy the new token with stolen funds from one set of wallets, then sell it back into the same pool from a second set of wallets that collect the real asset.

At no point do the stolen funds transfer directly from a buying wallet to a collecting wallet, because the pool sits in between. To a casual observer, the collecting wallets look like ordinary traders who sold a token at a profit.

Each of the six NEAR tokens cost about 25 NEAR, or around $90, to create. Each was traded heavily within hours using stolen NEAR and then abandoned. None has traded since Nov. 8, and that afternoon the creators of four of them withdrew what liquidity was left. Five of the six token creators were funded by a wallet that had just sold an earlier token, between two and 13 minutes before the next launch, so the tokens form a chain.

Elliptic first 报告 the same approach in the laundering of the February 2025 Bybit theft, also attributed to North Korean group TraderTraitor, when a worthless Tron token helped move at least $24 million. In the Binance case the firm has also seen the technique on Tron and a close variant on Solana that used existing thinly traded tokens rather than homemade ones.

A slowing tactic, not a disappearing act

The meme coins do not hide the funds. Every step is public on-chain. What they buy is time. Each extra hop slows investigators while launderers race to move funds before they are flagged, and at about $90 apiece the tokens are cheap enough to throw away.

That fits the larger pattern Elliptic has tracked since the theft: more than 20,000 wallets on 16 blockchains, at least 36 services and at least 65,000 transactions. Binance has 说过 the attack began with a fake job interview and ran for five months before any coins moved. Blockchain firms linked the breach to TraderTraitor within a day.

The conversion into bitcoin is the bigger dollar story. All of the stolen SOL has already been swapped, bridged or mixed, and much of the XRP route has fed into bitcoin as well. About $2.85 billion of the original haul has been frozen. A negligible amount has likely been cashed out so far, Elliptic said.

North Korea’s crypto theft machine is not new. Elliptic put the North Korean regime’s 2025 haul above $2 billion, driven by the $1.46 billion Bybit exploit, and its cumulative known total above $6 billion even before Binance.

Binance has reopened withdrawals in stages and said it covered customer losses from its own funds. The test for investigators is whether homemade liquidity pools keep multiplying faster than the blocklists catching up to them.

This post North Korea Is Minting Its Own Meme Coins to Launder Binance Hack Loot first appeared on Bitcoin Magazine and is written by Micah Zimmerman.


评论

发表回复

您的邮箱地址不会被公开。 必填项已用 * 标注

最新信息

热门类别

搜索网站

热门故事

标签

#AlexeyPertsev (1) #BidenCryptoBan (1) #BidenElection (1) #BinanceVsCoinbase (1) #Bitcoin (458) #BitcoinETF (3) #itcoinFundamentals (1) # 比特币处理 (1) # 比特币价格 (5) # 比特币价格水平 (1) #BitcoinPump (1) #BitcoinReserve (1) #BitcoinSurge (1) #itcoinTop (1) #Bitfinex (1) #Bitwise (1) #BracebridgeCapital (1) #BRC20Tokens (1) #BTC 收购 (1) 1TP5 看涨预测 (1) #BullishSentiment (1) #C 中国矿业 (1) #CPIPreview (1) #CryptoAsset (2) #CryptoBattle (1) #CryptoBoom (1) #CryptoExpert (1) #CryptoInsights (1) #CryptoMania (1) #CryptoMarket (4) #CryptoPrediction (1) #CryptoPredictions (1) #CryptoRegulation (2) #CryptoTakeoff (1) #CryptoTiming (1) #CryptoTips (1) #CryptoTreasury (1) #CryptoUncertainty (1) #DerivativeJump (1) #Dogecoin (74) #ogecoinGains (1) #ogecoinVolume (1) #DutchCourt (2) #ECommerce (1) #El萨尔瓦多比特币 (1) #E以太坊 (74) #EthereumPain (1) #E以太坊价格 (1) #ExpertOpinion (1) #FedRateCut (1) #FiatCurrency (1) #F 财务影响 (1) #F 财务隐私 (1) #FirmShutdown (1) #FrozenAccounts (1) #IllicitFunds (1) #InflationData (1) #Investment (1) #InvestmentLoss (1) #JapaneseFirm (1) #L LegalAction (1) #L 法律影响 (1) #Legislation (1) #LightningNetwork (1) #M 市场分析 (3) #M 市场监测 (1) #M 市场预测 (1) #M 市场预测 (1) #M 市场投影 (1) #M 市场支持 (1) #M 市场波动性 (1) #M 婚姻 (1) #MemeCoin (5) #MemeCoins (2) #Miner 盈利能力 (1) #M 洗钱 (2) #MtGox (4) #朝鲜加密货币 (1) #诺沃格拉茨预测 (1) 1TP5价格里程碑 (1) #P 价格预测 (2) 1TP5价格问题 (1) #PriceSurge (1) #PrisonSentence (1) # 量化分析 (1) #R 监管压力 (1) #SECA Anti-Crypto (1) #ShibaInu (6) #SocialBuzz (1) #T 技术分析 (1) #Toncoin (3) #T 龙卷风现金 (3) #T 龙卷风现金发展项目 (1) #T 龙卷风现金开发者 (1) #UKCrypto (1) #UpsidePotential (1) #USCongress (1) #WyomingLand (1) #XRPPrice (1) #XRPupswing (1)

实用链接

我发现了一些有用的链接,希望与大家分享。