Skip to content
North Korea Launders $430K from Binance Hack Using Meme Coins

North Korea Launders $430K from Binance Hack Using Meme Coins

First seen 9 Nov 2026, 18:38 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 9, 2026 at 21:41 UTC
  • •North Korean hackers laundered $430,000 using six disposable meme coins.
  • •The laundering method obscures wallet-to-wallet transfers through decentralized liquidity pools.
  • •This technique was previously observed in the Bybit hack, indicating a repeat strategy.

North Korean hackers have reportedly laundered approximately $430,000 in stolen cryptocurrency from the $6.3 billion Binance hack by creating six disposable meme coins. These tokens were launched on the NEAR blockchain between November 5 and 7, 2026, and were paired with NEAR in decentralized liquidity pools to obscure the movement of funds. The laundering operation involved two sets of wallets: one that bought the tokens using stolen NEAR and another that sold them back to withdraw NEAR, effectively disguising the stolen funds as trading profits. Elliptic, a blockchain analytics firm, noted that the tokens were designed for single-use and attracted little outside trading, indicating they were created solely for laundering purposes. This method mirrors techniques previously used in the $1.5 billion Bybit hack in 2025. As of now, 11.8 million NEAR from the Binance hack remains unspent, valued at approximately $43.7 million.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 10h ago How this analysis works

Timeline

2026-11-05
Creation of meme coins begins
North Korean hackers launched six meme coins on the NEAR blockchain for laundering purposes.
Elliptic.Co
2026-11-07
Meme coin trading activity observed
The tokens were used to route approximately $430,000 in stolen NEAR through decentralized exchanges.
Yahoo
2026-11-09
Elliptic reports on laundering technique
Elliptic published findings detailing the laundering method and its implications for tracking stolen funds.
Finance.Biggo

More articles in this cluster (13)

Following this threat?

Track TraderTraitor and Binance in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Common questions

How much money was laundered?
Approximately $430,000 in stolen NEAR was laundered through six meme coins.
What is the current status of the stolen funds?
As of now, 11.8 million NEAR from the Binance hack remains unspent.
What techniques are used in this laundering method?
The hackers create disposable tokens and use decentralized liquidity pools to obscure wallet transactions.