Key Takeaways
- • Chainalysis says hackers behind the $6.3 billion theft from Binance Holdings Ltd. are moving some of the stolen cryptocurrency through Chinese money-laundering networks, according to the blockchain analytics firm.
- • US authorities have identified the hackers as members of North Korea's TraderTraitor group, which has transferred stolen assets across thousands of digital wallets and multiple blockchains to obscure their origins.
- • Chainalysis has tracked hundreds of thousands of dollars from the Binance theft into these networks, a small fraction of the total stolen.
- • North Korean hackers have used Chinese money-laundering networks in previous thefts, establishing a recurring laundering channel.
Summary
US authorities have identified the perpetrators as members of North Korea's TraderTraitor group. According to Chainalysis, the hackers have moved stolen assets through thousands of digital wallets and across multiple blockchains in an effort to obscure their origins, a common tactic for disguising the flow of illicit proceeds.
Chainalysis said it has tracked hundreds of thousands of dollars from the Binance theft flowing into these Chinese networks. That figure represents only a fraction of the total stolen, indicating that the bulk of the proceeds has not yet been traced to this channel in the firm's analysis.
The article notes that North Korean hackers have used Chinese money-laundering networks in previous thefts as well, suggesting the channel is an established part of the group's laundering operations rather than a one-off route. For institutional market participants, the findings underscore the sanctions and compliance exposure that large-scale exchange hacks create across the crypto ecosystem, including for counterparties that interact with exchanges or wallets receiving laundered funds.
Go deeper than the headline
Research every firm in this story, track the ones that matter and get the daily briefing — free for 7 days.