01
The FBI formally linked North Korea to the record 6.3 billion dollar Binance hack in early November 2026.
02
The FBI also publicly asked the decentralized protocol THORChain to block addresses tied to the stolen funds.
03
On-chain analysts say hackers moved roughly 242 million dollars through the Tron blockchain in just two days.
04
A second wave of funds was reportedly shifted to Solana and is being converted back into Bitcoin.
05
THORChain has no company and no customer accounts, so there is no single party for regulators to subpoena.
06
This is the same laundering playbook North Korea used on the 1.4 billion dollar Bybit hack in 2025.
07
THORChain earned millions of dollars in swap fees from that earlier laundering before facing internal backlash.
08
The lesson: permissionless DeFi tools that need no ID can move stolen money just as easily as legitimate trades.