North Korea's $6.3B Binance Hack Takes a Strange Turn With Meme Coins
North Korean hackers allegedly laundered $6.3B from Binance using meme coins on Tron, Solana, and Near, according to Elliptic. The FBI attributed the hack to state-sponsored group Tradertraitor, while North Korea denied involvement. Stolen funds were converted into bitcoin and ether, with some routed through Tornado Cash.
How this was made
The 30-second read
Why it matters
The disclosed method could trigger heightened regulatory scrutiny and exchange delistings for the affected tokens, influencing short‑term sentiment across the crypto market.
Market read
First‑report of a multi‑chain meme‑token laundering chain, introducing new risk considerations for crypto investors and regulators.
What to watch
The role of decentralized mixers like Tornado Cash could be mitigated by upcoming regulatory crackdowns, limiting long‑term impact.
Background
The article details a novel laundering technique used by North Korean actors involving meme tokens on multiple blockchains, following the Oct. 29 Binance hack.
Ticker impact
North Korean launderers created meme tokens on Near, moving $430,000 in 117,000 NEAR through thin‑liquidity pools.
likely downward pressure as market prices in regulatory scrutiny and potential exchange delistings.
The hack highlights a new illicit use case for Near, which could trigger compliance actions and reduced investor confidence.
Meme tokens on Solana were used to disguise stolen funds; existing Solana assets were layered in the laundering scheme.
likely modest decline as traders reassess exposure to Solana‑based laundering vectors.
The article reveals a novel laundering pathway involving Solana, which could affect sentiment and exchange monitoring.
A worthless Tron token was created solely for laundering on Nov. 2, part of the multi‑layered scheme.
likely slight downward pressure as investors watch for possible exchange actions.
While the token itself is worthless, the association may raise compliance concerns for the Tron ecosystem.
Elliptic traced conversions of stolen assets into XRP among other tokens before moving to Bitcoin.
possible modest dip as market reacts to the laundering link.
XRP’s involvement is peripheral but could affect perception of its use in illicit flows.
Elliptic tracked conversions of stolen funds into roughly 3,000 Bitcoin, worth $225 M by Nov. 9.
likely minimal impact; Bitcoin’s market depth may absorb the news without significant price move.
While the amount is sizable, Bitcoin’s liquidity and broader market factors dominate price action.
Market effects
Highlights crypto‑asset laundering risks, potentially prompting tighter compliance across blockchain platforms.
May affect Asian crypto exchanges where North Korean actors operate.
Raises awareness of cross‑chain illicit finance, influencing global regulator and exchange policies.
Counterpoint
Some traders may view the exposure as a catalyst for price rebounds if exchanges act swiftly to isolate tainted tokens.
Key entities
- Analytics FirmElliptic
Provided blockchain forensic analysis linking the hack to meme‑token laundering.
- North Korean hacking groupTradertraitor
Attributed to the Binance theft and subsequent laundering scheme.
