TLDR
- North Korean hackers laundered about $242 million of the funds stolen from Binance on Tron in two days, per analyst SomaXBT.
- Relay, THORChain, Chainflip and Symbiosis moved about $140 million of it off Tron.
- The FBI blamed the TraderTraitor group and urged THORChain node operators and other services to block addresses tied to the hack.
- THORChain’s co-founder did not say whether node operators will block the listed addresses.
- Elliptic has verified $2.85 billion of the stolen funds as frozen or seized, but $3.25 billion sits in assets no issuer can freeze.
North Korean hackers have laundered about $242 million of the funds stolen from Binance on the Tron blockchain in two days. Onchain analyst SomaXBT shared the figure on X on Sunday.
1/ Binance exploit just passed 2 days, and so far the attackers (laundering team) have laundered ~$242M through the Tron leg alone, out of the $3.5 billion they still controlled after the freezes.
Here is the full analysis of the laundering from my tracing 🧵 pic.twitter.com/QvawpJ7re5
— SomaXBT (@somaxbt) November 1, 2026
The attackers took about $628 million from Binance on Tron. About $249 million was left to move after Tether froze 378.7 million USDT.
Most of the $242 million, about $194 million, left Tron through bridges and swap services. Another $26 million stayed on the network, and about $22 million went to fees, slippage and price moves.
Relay handled $48 million, THORChain $44 million, Chainflip $32.1 million and Symbiosis $16 million. Together that is about $140 million.
FBI Names North Korean Group
Binance lost about $6.3 billion on Thursday in the largest crypto hack on record. The FBI blamed the TraderTraitor group on Saturday in an alert with the U.S. Secret Service and IRS Criminal Investigation.
The FBI said the hackers were converting stolen assets primarily into Ethereum. It urged THORChain node operators and other services to block related transactions.
The agency listed 608 Ethereum addresses, 19 bitcoin addresses and one Solana address. It listed no Tron addresses.
The FBI also blamed TraderTraitor for the $1.5 billion Bybit hack in February 2025. Chainalysis, Elliptic and TRM Labs linked the Binance theft to North Korea through onchain ties to earlier hacks.
THORChain co-founder Chad Barraford said node operators have “zero information that isn’t already public.” He did not say whether they would block the listed addresses.
An Ethereum reorg caused THORChain to double-refund a 10 ETH deposit on Saturday, which triggered an emergency pause, Chainalysis said. Trading stayed halted on 10 of 13 connected chains as of 1:20 p.m. ET Sunday.
Bridges and Freezes
Relay received 37.64 million USDT and 39.28 million TRX in 735 deposits. Relay says it screens addresses with third-party risk data and an internal blocklist.
Symbiosis said its screening is built for normal flows, so “some mechanisms have gaps.” It said it is closing them and is in contact with Binance.
Elliptic said the main Tron distribution wallet paid out every hour for 31 straight hours. Co-founder Tom Robinson said the activity does not appear to involve AI agents.
Elliptic has verified $2.85 billion of the stolen funds as frozen or seized, about 44% of the $6.43 billion it counts as stolen. About $3.25 billion sits in assets that no issuer can freeze.
Chainalysis said the hackers deposited stablecoins into DeFi protocols on Tron for receipt tokens that cannot be frozen. Other analysts identified the protocol as JustLend, though Chainalysis did not name it.
On Sunday, Lookonchain reported that the hackers began swapping 970,522 SOL, worth about $95.9 million, for bitcoin through Relay. The Solana wallet held about 466,700 SOL at publication time.
Stop guessing and start investing with confidence. KnockoutStocks gives you the AI insights, market intelligence, and stock research you need to spot opportunities, cut through the noise, and make smarter investment decisions — all in one powerful platform.
Sign up today and get 50% OFF full access to our premium stock picks.
Simply use coupon code SPECIAL50 at checkout to claim your exclusive discount.
Get 3 Free Stock Ebooks
Discover top-performing stocks in AI, Crypto, and Technology with expert analysis.
- Top 10 AI Stocks - Leading AI companies
- Top 10 Crypto Stocks - Blockchain leaders
- Top 10 Tech Stocks - Tech giants
