The FBI has published a list of addresses holding the stolen assets on its official website. I've included the link to the original article here: https://www.fbi.gov/investigate/cyber/alerts/2026/north-korea-responsible-for-6-billion-binance-attack This is the official page, not something compiled by someone else. The page clearly states that these ETH addresses currently hold, or have previously held, the stolen assets, and are operated by or closely associated with North Korean TraderTraitor personnel. The FBI's requirements are also listed on the page: THORNode node operators, RPC service providers, instant exchange providers, DeFi services, and on-chain analytics companies must block transactions related to or derived from these addresses. Exchanges, nodes, and wallets can directly use this list.