North Korean hackers, even when laundering money, have to pay a toll. Three days after the $6.3 billion theft from Binance, hackers laundered approximately $242 million through Tron alone. They stole $628 million from Tron, of which Tether froze $378.7 million on the day of the incident. The remaining $249 million was split into thousands of transactions and fed into cross-chain bridges, with the bulk ultimately exchanged for approximately 53,300 ETH. The largest channel was THORChain, a cross-chain exchange protocol that requires no registration and is accessible to anyone. The hackers exchanged approximately $48.3 million there, but only received $42.7 million, with 12% lost to fees and slippage. The FBI specifically requested THORChain to intercept the hackers' transactions, but its co-founders refused, arguing that Ethereum and Bitcoin nodes don't need to obey law enforcement, and neither should THORChain. As a result, on the morning of October 31st, Ethereum underwent a chain reorganization, meaning the most recent blocks were rewritten. THORChain malfunctioned as a result, refunding a user double the amount of ETH, triggering an emergency halt, and shutting down most cross-chain exchanges. The protocol that the FBI couldn't stop was halted by its own bug, leaving the hackers unable to operate. THORChain's own coin is called RUNE. Previously, when hackers used it for money laundering, the protocol fees were high, and RUNE's price often rose accordingly. This time, it dropped by approximately 17.7% in 24 hours. Meanwhile, the hackers still held approximately $3.5 billion.