$3.1B in Stolen Binance Crypto Has Yet to Be Laundered: Elliptic

Decrypt11-06 14:04

In brief About $3.11 billion of the $6.43 billion stolen from Binance remains in addresses linked to the theft, mostly in ETH and Bitcoin, according to Elliptic. The laundering has used more than 20,...

Source Link

Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.

Comments

We need your insight to fill this gap

Leave a comment

{"i18n":{"language":"en_US"},"isChannel":false,"data":{"share":"https://ttm.financial/m/news/2681786060?lang=en_US&edition=fundamental","thumbnail":"https://img.decrypt.co/insecure/rs:fit:3840:0:0:0/plain/https://cdn.decrypt.co/wp-content/uploads/2026/11/north-korea-lazarus-group-dprk-hacker-decrypt-style-02-gID_7.jpg@webp","is_english":true,"pubTime":"2026-11-06 14:04","share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","id":"2681786060","market":"nz","top_or_hot":-1,"title":"$3.1B in Stolen Binance Crypto Has Yet to Be Laundered: Elliptic","media":"Decrypt","content":"<div>\n<p>In brief\nAbout $3.11 billion of the $6.43 billion stolen from Binance remains in addresses linked to the theft, mostly in ETH and Bitcoin, according to Elliptic.\nThe laundering has used more than 20,...</p>\n\n<a href=\"https://decrypt.co//382711/3-1b-in-stolen-binance-crypto-has-yet-to-be-laundered-elliptic\">Source Link</a>\n\n</div>\n","source":"decrypt_highlight","html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>$3.1B in Stolen Binance Crypto Has Yet to Be Laundered: Elliptic</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\n$3.1B in Stolen Binance Crypto Has Yet to Be Laundered: Elliptic\n</h2>\n\n<h4 class=\"meta\">\n\n\n2026-11-06 14:04 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://decrypt.co//382711/3-1b-in-stolen-binance-crypto-has-yet-to-be-laundered-elliptic><strong>Decrypt</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>In brief\nAbout $3.11 billion of the $6.43 billion stolen from Binance remains in addresses linked to the theft, mostly in ETH and Bitcoin, according to Elliptic.\nThe laundering has used more than 20,...</p>\n\n<a href=\"https://decrypt.co//382711/3-1b-in-stolen-binance-crypto-has-yet-to-be-laundered-elliptic\">Source Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","isBrief":false,"type":0,"news_type":1,"symbol":"BITY","symbol_name":"Amplify Bitcoin 2% Monthly Option Income ETF","start_time":0,"source_url":"https://decrypt.co//382711/3-1b-in-stolen-binance-crypto-has-yet-to-be-laundered-elliptic","article_id":"2681786060","we_media_id":null,"thumbnails":["https://img.decrypt.co/insecure/rs:fit:3840:0:0:0/plain/https://cdn.decrypt.co/wp-content/uploads/2026/11/north-korea-lazarus-group-dprk-hacker-decrypt-style-02-gID_7.jpg@webp"],"rights":{"source":"decrypt_highlight","url":"https://decrypt.co//382711/3-1b-in-stolen-binance-crypto-has-yet-to-be-laundered-elliptic","rn_cache_url":null,"directOrigin":true},"url":"https://stock-news.laohu8.com/highlight/detail?id=2681786060","pubTimestamp":1793945058,"columns":[],"sourceInfo":{"source_id":"decrypt_highlight","name":"Decrypt"},"weMediaInfo":null,"summary":"Around half of the $6.43 billion stolen from Binance last month has yet to be laundered, blockchain analytics firm Elliptic said in a report updated on Friday.\nAbout $3.11 billion remains in addresses linked to the theft, mostly in ETH and Bitcoin, and those funds are \"very likely\" still held by North Korea, Elliptic said. A further $2.85 billion, or 44% of the haul, has been frozen or seized, mostly stablecoins that issuers such as Tether and Circle froze within an hour of the theft. That compa...","collect":0,"end_time":0,"defaultTopTitle":"decrypt.co","property":[],"viewcount":null,"language":"en","relate_stocks":{"BITY":"Amplify Bitcoin 2% Monthly Option Income ETF","ETCO":"Grayscale Ethereum HIGH Income ETF","BTCO":"比特币ETF-Invesco Galaxy","BITB":"比特币ETF-Bitwise","QETH":"以太坊ETF-Invesco Galaxy","BETE":"等权重比特币&以太币期货ETF-ProShares","BFJL":"FT Vest Bitcoin Strategy Floor15 ETF - July","BITC":"Bitwise Trendwise Bitcoin and Treasuries Rotation Strategy ETF","ETHT":"ProShares Ultra Ether ETF","SBIT":"2倍做空比特币期货ETF-Proshares","ETU":"T-Rex 2X Long Ether Daily Target ETF","ETHU":"2倍以太币期货ETF-Volatility Shares","CBXA":"Calamos Bitcoin 90 Series Structured Alt Protection ETF – April","CBXJ":"Calamos Bitcoin 90 Series Structured Alt Protection ETF - January","BTCZ":"T-Rex 2X Inverse Bitcoin Daily Target ETF","BITO":"比特币期货ETF-ProShares","IBIT":"比特币ETF-iShares","EETH":"以太币期货ETF-ProShares","ETH":"低成本以太坊ETF-Grayscale","BAGY":"Amplify Bitcoin Max Income Covered Call ETF","TETH":"21Shares Ethereum ETF","BFAP":"FT Vest Bitcoin Strategy Floor15 ETF - April","BTC":"Grayscale Bitcoin Mini Trust","ETHA":"以太坊ETF-iShares","CBXO":"Calamos Bitcoin 90 Series Structured Alt Protection ETF - October","YETH":"Roundhill Ether Covered Call Strategy ETF","BRRR":"比特币ETF-CoinShares","FETH":"以太币ETF-Fidelity","XBTY":"GraniteShares YieldBOOST Bitcoin ETF","BPI":"Grayscale Bitcoin Premium Income ETF","CBXY":"Calamos Bitcoin 90 Series Structured Alt Protection ETF - July","MNRS":"GRAYSCALE BITCOIN MINERS ETF","ARKB":"比特币ETF-21Shares","CBOA":"Calamos Bitcoin Structured Alt Protection ETF - April","ETHD":"ProShares UltraShort Ether ETF","EZBC":"比特币ETF-Franklin","FBTC":"比特币ETF-Fidelity","BTCI":"NEOS Bitcoin High Income ETF","QBF":"Innovator Uncapped Bitcoin 20 Floor ETF - Quarterly","CBOJ":"Calamos Bitcoin Structured Alt Protection ETF - January","DEFI":"比特币期货ETF-Hashdex","EZET":"以太坊ETF-Franklin","ETQ":"T-Rex 2X Inverse Ether Daily Target ETF","DFII":"FT Cboe Vest Bitcoin Strategy & Target Income ETF","BITX":"2倍比特币期货ETF-Volatility Shares","BTRN":"比特币期货ETF-Global X","BTCL":"T-REX 2X LONG BITCOIN DAILY TARGET ETF"},"translate_title":"3.1B 美元被盗币安加密货币尚未清洗：椭圆","themeId":null,"isJumpTheme":false,"ttsUrl":null,"symbols_score_info":{"ETH":0.6,"MNRS":0.6,"BFJL":0.6,"DEFI":0.6,"FETH":0.6,"CBXY":0.6,"ETHU":0.6,"BFAP":0.6,"BITY":0.6,"QETH":0.6,"CBXJ":0.6,"EETH":0.6,"XBTY":0.6,"ETHD":0.6,"EZBC":0.6,"BITC":0.6,"QBF":0.6,"EZET":0.6,"YETH":0.6,"BITX":0.6,"ETU":0.6,"ETQ":0.6,"BRRR":0.6,"BTCO":0.6,"FBTC":0.6,"BITB":0.6,"BPI":0.6,"ETHT":0.6,"SBIT":0.6,"BTC":0.6,"BITO":0.6,"IBIT":0.6,"ETCO":0.6,"CBOA":0.6,"ARKB":0.6,"CBXO":0.6,"BTCZ":0.6,"CBOJ":0.6,"BAGY":0.6,"BTCI":0.6,"CBXA":0.6,"ETHA":0.6,"TETH":0.6,"BTCL":0.6,"DFII":0.6,"BTRN":0.6,"BETE":0.6},"content_text":"In brief\nAbout $3.11 billion of the $6.43 billion stolen from Binance remains in addresses linked to the theft, mostly in ETH and Bitcoin, according to Elliptic.\nThe laundering has used more than 20,000 wallets on 16 blockchains and at least 36 services, but only a negligible amount has likely been cashed out.\nElliptic expects the funds to be swapped into Bitcoin and cashed out through over-the-counter brokers over months, as happened after the 2025 Bybit hack.\nAround half of the $6.43 billion stolen from Binance last month has yet to be laundered, blockchain analytics firm Elliptic said in a report updated on Friday.About $3.11 billion remains in addresses linked to the theft, mostly in ETH and Bitcoin, and those funds are \"very likely\" still held by North Korea, Elliptic said. A further $2.85 billion, or 44% of the haul, has been frozen or seized, mostly stablecoins that issuers such as Tether and Circle froze within an hour of the theft. That compares with around 3% frozen after the $1.5 billion Bybit hack in February 2025, according to Elliptic.\nBinance hack update: the XRP has started moving. About $50 million has been swapped, mostly through THORChain into BTC, with about $226 million still to move.\nBitcoin converted from other stolen assets is now about 1,650 BTC ($124 million), almost twice the figure a day earlier.…\n— Elliptic (@elliptic) November 6, 2026The FBI has attributed the October 29 theft to North Korean hackers it calls TraderTraitor. North Korea has denied involvement.The laundering so far has been \"highly complex and clearly automated,\" Elliptic said. It has used more than 20,000 wallets on 16 blockchains, at least 36 services and at least 65,000 transactions, roughly one new wallet every 30 seconds.The 18,270 BTC stolen from Binance, worth about $1.5 billion at the time of the theft, was split into 19 addresses on the day of the hack and has not moved since. The nine largest Ethereum addresses, holding 89% of the attacker's ETH, have not moved since October 30.Predict·CryptoEthereum next move: Pump to $3K or Dump to $1.5K?52%48%$3K$1.5K$156.21K volumeHITOpen until resolutionOpen until resolutionHow the funds are movingMost of the laundering so far, about $220 million in TRX, has run through Tron, where a single distribution wallet sent 684.6 million TRX to hundreds of new addresses over 51 hours, including through the night in Pyongyang. Almost all of it was bridged to Ethereum.All of the stolen Solana, about $87 million at current prices, has been swapped, bridged or mixed, and the attacker has started laundering the stolen XRP, with about $50 million converted so far and $226 million remaining. In total, about $124 million has been converted into Bitcoin, much of it through cross-chain service THORChain.Some funds have been mixed. About 33 BTC, worth around $2.5 million, has gone through Wasabi-style coinjoins, and about $1.1 million in ETH and SOL has been deposited into the Privacy Cash pool, which paused deposits for about a day.The speed has fueled speculation that AI agents are moving the funds, but Elliptic said the evidence points to conventional automation. \"The laundering is clearly automated, but nothing we have seen shows an AI agent making decisions,\" the firm said.Elliptic expects the attacker to swap the ETH for Bitcoin and then cash out through OTC brokers and exchanges over a period of months. After the Bybit hack, North Korea laundered all 499,000 stolen ETH within 10 days but took months to cash out, the firm noted.Binance has continued to restore services. On Friday, the exchange said users could now verify that their balances are backed at least 1:1 using the zero-knowledge proof for its latest proof-of-reserves snapshot, and that it aims to reopen withdrawals for all tokens on restored networks by the end of next week.Daily Debrief NewsletterStart every day with the top news stories right now, plus original features, a podcast, videos and more. Email addressJoin freeJoin 72,000+ readersCreate an account to save your articles.Add on GoogleAdd Decrypt as your preferred source to see more of our stories on Google.","kind":"highlight","is_publish_news":true,"is_publish_highlight":false,"is_publish_live":false,"is_publish_wemedia":false,"editions":null,"column":"","sentiment":"0","news_tag":"","news_rank":0,"isVideo":false,"video":null,"symbols":[],"gpt_button":0,"need_auth":false,"need_login_tip":false,"code":"91000000","status":"200"},"commentList":[],"isCommentEnd":true,"newsSizeData":{"likeSize":0,"commentSize":0,"repostSize":0,"favoriteSize":0,"likeStatus":false,"favoriteStatus":false},"APP":{"userAgent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","isDev":false,"isTTM":true,"isLaohu8Offline":false,"tenantId":"TBGLOBAL","deviceId":"web-server-community-laohu8-v3","version":"4.53.0","shortVersion":"4.53.0","platform":"web","vendor":"web","appName":"ttm","isIOS":false,"isAndroid":false,"isTiger":false,"isTHS":false,"isWeiXin":false,"isWeiXinMini":false,"isWeiBo":false,"isQQ":false,"isBaiduSwan":false,"isBaiduBox":false,"isDingTalk":false,"isToutiao":false,"isOnePlus":false,"isHuaWei":false,"isXiaomi":false,"isXiaomiWebView":false,"isOppo":false,"isVivo":false,"isSamsung":false,"isMobile":false},"href":"/m/news/2681786060","isCrawlerRequest":true}