North-linked hackers have started moving Binance haul in laundering scheme, analysts say
Analysts report North Korea-linked hackers have started laundering $6.3B in crypto stolen from Binance, converting 970,522 Solana tokens ($95.9M) into Bitcoin. The FBI attributed the hack to the TraderTraitor group. Chainalysis noted the use of automated tools and circular transactions to obscure the funds' trail.
How this was made

The 30-second read
Why it matters
The disclosed conversions represent the first public detail of the laundering phase, affecting crypto market dynamics.
Market read
New evidence of illicit fund movement may sway investor sentiment on SOL and BTC, and could trigger regulatory attention on exchanges.
What to watch
Potential law‑enforcement seizures of the stolen assets could later remove pressure from both SOL and BTC.
Background
North Korea‑linked hackers have been laundering $6.3 billion stolen from Binance, now moving large amounts of SOL into Bitcoin.
Ticker impact
Hackers are converting roughly 970,522 Solana tokens ($95.9M) into Bitcoin as part of the laundering scheme.
likely pressure as the market prices in the forced liquidation of stolen SOL.
The article reports a fresh, sizable outflow of SOL to Bitcoin, indicating supply shock.
Hackers are moving stolen assets into Bitcoin to avoid freezes and increase liquidity.
likely support as the market absorbs newly converted Bitcoin.
The article discloses a fresh influx of Bitcoin from stolen funds, which may boost demand.
Market effects
Highlights ongoing security risks in crypto exchanges and may prompt tighter compliance across the sector.
Global, as Binance operates worldwide and the laundering involves multiple blockchain networks.
Reinforces concerns about crypto crime, potentially influencing regulator scrutiny.
Counterpoint
The forced sale of SOL could create a short‑term buying opportunity if price overshoots the panic sell‑off.
Key entities
- exchangeBinance
Crypto exchange from which the funds were stolen.
- analytics firmChainalysis
Provides blockchain analysis confirming the transfers.




