Elliptic says about $2.85 billion, or 44%, of the roughly $6.43 billion stolen from Binance has been frozen or seized. The attacker has now begun using CoinJoin, while approximately $3.24 billion remains in linked addresses.
Why it matters
The laundering trail spans 11 blockchains, around 12,000 wallets and more than 40,000 transactions. The scale and cross-chain reach make tracking the stolen funds a complex enforcement challenge.
Market impact
Tron was a major route, with funds spread across about 7,700 addresses. About $16 million was also sent to addresses linked to the earlier Bitget hack, connecting the activity to another major theft.
Source: [How North Korea is laundering the $6.4 billion stolen from Binance — Elliptic](https://www.elliptic.co/insights/how-north-korea-is-laundering-the-6-4-billion-stolen-from-binance/#webpage)
Frequently asked questions
-
How much of the Binance funds has been frozen or seized?
About $2.85 billion, or 44% of the roughly $6.43 billion stolen, has been frozen or seized.
-
How much of the stolen Binance funds remains in linked addresses?
Roughly $3.24 billion remains in addresses linked to the theft.
-
What laundering methods or routes does Elliptic describe?
The activity spans 11 blockchains and includes the use of CoinJoin. Tron was a major route, with funds spread across about 7,700 addresses.
-
How broad is the transaction trail?
Elliptic identified around 12,000 wallets and more than 40,000 transactions across 11 blockchains.
-
What links the Binance theft to the earlier Bitget hack?
About $16 million was sent to addresses linked to the earlier Bitget hack.
WuBlockchain