Independent record. Not associated with, endorsed by or operated by Binance. This site is read-only: there is nothing to sign in to, pay for or connect.

All sources

North Korean hackers launder $242 million of Binance loot via Tron as FBI presses THORChain: analyst

Publisher
The Block (News media)
Original
https://www.theblock.co/news/defi/2026-11-01-north-korean-hackers-launder-242-million-of-binance-loot-via-tron-as-fbi-presses-thorchain-analyst-432257
Published
First seen
Last captured
Watched for edits
No

Capture history

Newest first. The raw hash is the SHA-256 of the stored copy exactly as fetched. We keep the copy privately and publish its hash. The text hash is of the text extracted from it, which is what is compared between captures.

Captured (UTC)Fetched viaHTTPRaw sha256Text sha256Text changed
scrapex-web09200a7d963a11ea438a58f0e1109305d0576c2833bcdc7740aa32a67f5e997b726717c66738974c54fcc8a0d5f9cc8fabdace9359c5e1b1afe35f24392b9c829a0e3No

Changes between captures

No text changes detected between captures of this source.

Claims quoted from this source

ReportedamountStatement 1223

The Block reported that onchain analyst and Security Alliance contributor SomaXBT said North Korean hackers had laundered about $242 million of the stolen funds on the Tron blockchain in two days.

North Korean hackers have laundered about $242 million of the funds stolen from Binance on the Tron blockchain in two days, onchain analyst and Security Alliance (SEAL) contributor SomaXBT said on X on Sunday, as the FBI presses THORChain and other services to block the transactions.

Speaker
Not recorded
Publisher
The Block (News media)
Original
North Korean hackers launder $242 million of Binance loot via Tron as FBI presses THORChain: analyst
Captured
Stored copy
sha256 a7d963a11ea4
Published
ReportedattributionStatement 1227

The Block reported that the FBI published a list of 608 Ethereum addresses, 19 bitcoin addresses and one Solana address it said were linked to the attack, with no Tron addresses.

The agency also published a list of 608 Ethereum addresses, 19 bitcoin addresses and one Solana address, but no Tron addresses, that it said were linked to the attack.

Speaker
Federal Bureau of Investigation (FBI)
Publisher
The Block (News media)
Original
North Korean hackers launder $242 million of Binance loot via Tron as FBI presses THORChain: analyst
Captured
Stored copy
sha256 a7d963a11ea4
Published
ReportedresponseStatement 1229

THORChain technical co-founder Chad Barraford wrote on X that "THORNode operators have zero information that isn't already public and readily available in real time." The Block reported that his posts have not said whether node operators would block the listed addresses.

THORChain technical co-founder Chad Barraford wrote on X on Saturday evening that "THORNode operators have zero information that isn't already public and readily available in real time."

Speaker
Chad Barraford
Publisher
The Block (News media)
Original
North Korean hackers launder $242 million of Binance loot via Tron as FBI presses THORChain: analyst
Captured
Stored copy
sha256 a7d963a11ea4
Published
Reportedroot causeStatement 1230

Elliptic co-founder Tom Robinson said in comments shared with The Block that the laundering activity does not appear to involve AI agents, saying the pattern is repetitive and static.

Elliptic co-founder Tom Robinson said in comments shared with The Block that the activity does not appear to involve AI agents. "The pattern is repetitive and static: the same sizes, the same rhythm, the same routes, hour after hour," Robinson said.

Speaker
Tom Robinson
Publisher
The Block (News media)
Original
North Korean hackers launder $242 million of Binance loot via Tron as FBI presses THORChain: analyst
Captured
Stored copy
sha256 a7d963a11ea4
Published
ReportedfreezeStatement 1232

Chainalysis said the hackers have been depositing stablecoins into DeFi protocols on Tron for depository receipt tokens, which cannot be frozen, and later redeeming them from new addresses.

Chainalysis said on Saturday the hackers have been depositing stablecoins into DeFi protocols on Tron for depository receipt tokens, which cannot be frozen, and later redeeming them from new addresses.

Speaker
Chainalysis
Publisher
The Block (News media)
Original
North Korean hackers launder $242 million of Binance loot via Tron as FBI presses THORChain: analyst
Captured
Stored copy
sha256 a7d963a11ea4
Published