Elliptic: North Korean hackers are laundering over $3.2 billion stolen from Binance, using automated programs rather than AI autonomous decision-making.

BlockBeats news, November 2 - According to blockchain analytics firm Elliptic, North Korea-linked hackers are conducting highly automated and sophisticated money laundering after stealing approximately $6.43 billion in crypto assets from the trading platform Binance. As of the article's update, the related funds have used about 12,000 wallets across 11 blockchains and initiated over 40,000 transactions in less than four days, creating a new wallet approximately every 25 seconds.

Elliptic stated that approximately $3.24 billion remains in addresses associated with the theft, primarily ETH and BTC; another approximately $2.85 billion has been frozen or seized, and the amount confirmed to have been cashed out is negligible. The money laundering path is mainly through Tron, with funds split into about 7,700 addresses and cross-chain bridged to Ethereum, with at least approximately $147 million already bridged out from Tron. Since November 1, some ETH, SOL, NEAR, and XRP have begun to move; about 28 BTC (approximately $2.2 million) entered Wasabi-style coinjoin mixing for the first time.

Elliptic believes the operation shows a fixed rhythm and batch characteristics, pointing to conventional automated programs rather than AI autonomous decision-making, and expects the attackers to follow the Bybit case path, gradually converting ETH into Bitcoin in batches and then cashing out through channels such as over-the-counter brokers.