Signal

North Korea-linked launderers use NEAR memecoins to move Binance hack funds

Evidence first: scan the strongest sources, then decide whether to go deeper.

Published 2026-11-09 15:01 UTCUpdated 2026-11-09 17:26 UTC
rsstelegram
cryptohackon_chainlaunderingnearmemecoins
Trend in the last 24h
Current brief openSource links open
This current signal is open on the public brief with summary, metadata, source links, and full evidence. Pro adds compare-over-time, alerts, exports, and workflow.
No card needed for the free brief.
Evidence trail (top sources)
top sources (4 domains)domains are deduped. counts indicate coverage, not truth.
4 top sources shown
Bitcoin Magazine report citing Elliptic
bitcoinmagazine.com · bitcoinmagazine.com · 2026-11-09 17:26 UTC
Crypto.News report citing Elliptic
crypto.news · crypto.news · 2026-11-09 15:49 UTC
CoinDesk report citing Elliptic
coindesk.com · coindesk.com · 2026-11-09 15:01 UTC
Overview

This is a new development in the investigation into the Binance hack: reports citing Elliptic say North Korea-linked operators created at least six tokens on NEAR and used decentralized-exchange liquidity pools to move roughly 117,000 NEAR, valued at about $430,000.

Entities
BinanceEllipticNEARTom RobinsonBTC
Why now
  • The reports were published on November 9 and cite a new Elliptic update.
  • The reported token activity occurred between November 5 and 7.
  • The development provides a fresh on-chain tracing lead for the stolen funds.
Why it matters
  • The reports describe memecoin liquidity pools being used as an additional route for moving stolen crypto assets.
  • The activity directly involves NEAR tokens and decentralized-exchange pools.
  • It adds a new laundering mechanism to the ongoing Binance hack investigation.
Evidence assessment
Recurring claims
  • Operators created six throwaway memecoins on NEAR and routed roughly 117,000 NEAR, or about $430,000, through their liquidity pools.
  • The activity is linked in the reports to the broader laundering of funds stolen in the Binance hack.
How sources frame it
  • Bitcoin Magazine: neutral
  • CoinDesk: neutral
  • Crypto.News: neutral
Multiple reports describe the same Elliptic finding about stolen NEAR being routed through newly minted memecoins.
All evidence
All evidence
CoinDesk report citing Elliptic
coindesk.com · coindesk.com · 2026-11-09 15:01 UTC
Bitcoin Magazine report citing Elliptic
bitcoinmagazine.com · bitcoinmagazine.com · 2026-11-09 17:26 UTC
Crypto.News report citing Elliptic
crypto.news · crypto.news · 2026-11-09 15:49 UTC
Show filters & breakdown
Evidence items loaded: 0Publishers: 4Origin domains: 4Duplicates: -
Showing 4 / 4