cryptd.in

另类 LinkedIn 适合加密人才

North Korea Is Creating Fake Meme Coins to Launder Millions From the $6.4B Binance Hack

North Korean hackers are creating their own meme coins to move stolen stash from the Binance hack, according to blockchain analytics firm Elliptic.

The attackers are using newly launched tokens and decentralized exchange liquidity pools to move funds between wallets without making direct transfers.

Binance Laundering Tactic

Elliptic flagged the activity on Tron and NEAR, along with a similar method on Solana. The process involves creating a token, pairing it with a legitimate crypto such as NEAR or a stablecoin, and adding it to a liquidity pool on a decentralized exchange.

The attackers then use one set of wallets to buy the newly created token with stolen funds. A separate group of wallets sells those tokens back into the pool and receives the original crypto. This puts the liquidity pool between the wallets, which makes it harder to immediately connect the funds entering the pool with those coming out.

The blockchain analytics firm said it first identified the method while tracking funds stolen from Bybit in 2025. In that case, North Korean launderers created a worthless token on Tron and used it to move at least $24 million through a liquidity pool. The same approach appeared again shortly after the Binance theft.

On November 2, Elliptic identified a newly created token on Tron that appeared to have been launched specifically for laundering. The following day, stolen Solana (SOL) was exchanged for wrapped and thinly traded tokens before being converted into USDC and transferred to other blockchains. The activity on NEAR provided the clearest evidence of the method.

Between November 5 and 7, the attackers created six tokens named FUK, OLCCL, MEILI, MMLI, DABI and SINU. Each was paired with NEAR in a separate liquidity pool. Creating a token cost around 25 NEAR, or approximately $90. The six tokens were then used to move around 117,000 NEAR, worth roughly $430,000. According to Elliptic, the wallets buying these tokens received their funding from stolen NEAR.

Almost the same amount later came out through separate wallets, and much of it was converted into stablecoins or transferred through a cross-chain bridge. The transaction patterns also showed that the tokens were not being traded by regular investors. Wallets connected to the laundering operation handled almost all the buying and selling. Three tokens, DABI, MMLI, and SINU, each had just one buying wallet and one selling wallet. The tokens were traded heavily shortly after launch and then abandoned. None of the six has recorded further trading activity since November 8.

Funds Still Traceable

Elliptic also found that proceeds from previously launched tokens were used to fund the creation of newer ones, connecting the six-token operation. The method does not remove the transaction trail from the blockchain. Investigators can still follow the funds, but the additional swaps and wallets make the process more time-consuming.

At around $90 per token, the cost of creating new ones is low. This allows the attackers to repeat the process with different tokens. The $430,000 moved through the six NEAR tokens represents only a small portion of the stolen funds. Elliptic estimates that around 11.8 million NEAR, worth approximately $43.7 million, remains unmoved.

The firm has also warned crypto exchanges and compliance teams against automatically treating funds received from liquidity pools as legitimate. Newly created tokens, pools with very few participating wallets, and accounts funded shortly before trading could indicate laundering activity.

职位 North Korea Is Creating Fake Meme Coins to Launder Millions From the $6.4B Binance Hack 首次出现在 加密土豆.


评论

發佈留言

發佈留言必須填寫的電子郵件地址不會公開。 必填欄位標示為 *

最新信息

热门类别

搜索网站

热门故事

标签

#AlexeyPertsev (1) #BidenCryptoBan (1) #BidenElection (1) #BinanceVsCoinbase (1) #Bitcoin (458) #BitcoinETF (3) #itcoinFundamentals (1) # 比特币处理 (1) # 比特币价格 (5) # 比特币价格水平 (1) #BitcoinPump (1) #BitcoinReserve (1) #BitcoinSurge (1) #itcoinTop (1) #Bitfinex (1) #Bitwise (1) #BracebridgeCapital (1) #BRC20Tokens (1) #BTC 收购 (1) 1TP5 看涨预测 (1) #BullishSentiment (1) #C 中国矿业 (1) #CPIPreview (1) #CryptoAsset (2) #CryptoBattle (1) #CryptoBoom (1) #CryptoExpert (1) #CryptoInsights (1) #CryptoMania (1) #CryptoMarket (4) #CryptoPrediction (1) #CryptoPredictions (1) #CryptoRegulation (2) #CryptoTakeoff (1) #CryptoTiming (1) #CryptoTips (1) #CryptoTreasury (1) #CryptoUncertainty (1) #DerivativeJump (1) #Dogecoin (74) #ogecoinGains (1) #ogecoinVolume (1) #DutchCourt (2) #ECommerce (1) #El萨尔瓦多比特币 (1) #E以太坊 (74) #EthereumPain (1) #E以太坊价格 (1) #ExpertOpinion (1) #FedRateCut (1) #FiatCurrency (1) #F 财务影响 (1) #F 财务隐私 (1) #FirmShutdown (1) #FrozenAccounts (1) #IllicitFunds (1) #InflationData (1) #Investment (1) #InvestmentLoss (1) #JapaneseFirm (1) #L LegalAction (1) #L 法律影响 (1) #Legislation (1) #LightningNetwork (1) #M 市场分析 (3) #M 市场监测 (1) #M 市场预测 (1) #M 市场预测 (1) #M 市场投影 (1) #M 市场支持 (1) #M 市场波动性 (1) #M 婚姻 (1) #MemeCoin (5) #MemeCoins (2) #Miner 盈利能力 (1) #M 洗钱 (2) #MtGox (4) #朝鲜加密货币 (1) #诺沃格拉茨预测 (1) 1TP5价格里程碑 (1) #P 价格预测 (2) 1TP5价格问题 (1) #PriceSurge (1) #PrisonSentence (1) # 量化分析 (1) #R 监管压力 (1) #SECA Anti-Crypto (1) #ShibaInu (6) #SocialBuzz (1) #T 技术分析 (1) #Toncoin (3) #T 龙卷风现金 (3) #T 龙卷风现金发展项目 (1) #T 龙卷风现金开发者 (1) #UKCrypto (1) #UpsidePotential (1) #USCongress (1) #WyomingLand (1) #XRPPrice (1) #XRPupswing (1)

实用链接

我发现了一些有用的链接,希望与大家分享。