The $2.84 million that was named—how far has it been laundered?
On October 21, PANews cited on-chain investigator ZachXBT as saying that an institution may have had approximately $2.84 million stolen on Binance Smart Chain $BNB on October 8 by SquidSquad, a group linked to North Korea. On October 20, 1,111.2 Ethereum $ETH was deposited into Tornado Cash. After withdrawal, it was split across three addresses, then bridged from Ethereum $ETH to $TRX via USDT0 and consolidated into two addresses. These two addresses have financial links to addresses previously attributed to North Korea. Within minutes, the funds moved through intermediary addresses to Chinese over-the-counter traders. ZachXBT believes this step may have been intended to avoid a potential freeze by Tether.
Ethereum $ETH is currently priced at 2,439.53 USDT, up 1.55% over 24 hours. These figures indicate only that the short-term price is relatively strong; they do not show whether the funds have already been cashed out over the counter, nor are they enough to directly attribute the price movement to this theft. The more concrete clue is the timing: mixing, splitting across addresses, bridging, and moving to OTC—all within minutes.
#安全事件 #链上追踪
On October 21, PANews cited on-chain investigator ZachXBT as saying that an institution may have had approximately $2.84 million stolen on Binance Smart Chain $BNB on October 8 by SquidSquad, a group linked to North Korea. On October 20, 1,111.2 Ethereum $ETH was deposited into Tornado Cash. After withdrawal, it was split across three addresses, then bridged from Ethereum $ETH to $TRX via USDT0 and consolidated into two addresses. These two addresses have financial links to addresses previously attributed to North Korea. Within minutes, the funds moved through intermediary addresses to Chinese over-the-counter traders. ZachXBT believes this step may have been intended to avoid a potential freeze by Tether.
Ethereum $ETH is currently priced at 2,439.53 USDT, up 1.55% over 24 hours. These figures indicate only that the short-term price is relatively strong; they do not show whether the funds have already been cashed out over the counter, nor are they enough to directly attribute the price movement to this theft. The more concrete clue is the timing: mixing, splitting across addresses, bridging, and moving to OTC—all within minutes.
#安全事件 #链上追踪