律动BlockBeats|Nov 04, 2026 12:59
[RUNE Surges Nearly 10% in 24 Hours as North Korean Hackers Resume Money Laundering of Stolen Binance Funds]
BlockBeats reports that on November 4th, the North Korean hacker group TraderTraitor is using the decentralized cross-chain protocol THORChain to transfer funds stolen from the $6.3 billion Binance hack, converting Ethereum into Bitcoin. This has driven the THORChain native token, RUNE, up nearly 10% in the past 24 hours.
The attackers first dispersed the stolen SOL into multiple wallets, converted it into USDC, and transferred it to the Ethereum network. They then bought ETH and converted it back into BTC via THORChain. Previously, the attackers had transferred some funds from the Tron network to THORChain. On-chain investigator SomaXBT estimates that as of November 1st, the attackers had converted approximately $48.3 million through the protocol, ultimately receiving approximately $42.7 million, with transaction fees and slippage losses of approximately 12%.
The FBI has attributed the October 29 Binance attack to TraderTraitor and called on THORChain node operators and other crypto service providers to intercept related addresses and funds. Because BTC and ETH cannot be frozen by their issuers like USDT and USDC, cross-chain exchanges increase the difficulty of recovering stolen funds.
Binance stated on Tuesday that it has frozen approximately $2.85 billion in stolen funds and replenished about 98% of the affected tokens with company funds. On-chain analytics firm Elliptic believes that the stolen funds are currently mainly being transferred between different addresses and may not yet have been cashed out on a large scale; the attackers may subsequently cash out in batches through over-the-counter trading channels. [Original Link]
Share To
Timeline
HotFlash
APP
X
Telegram
CopyLink