Elliptic reported on Nov. 9 that launderers used obscure tokens on Tron, Solana and Near to move assets stolen in the Oct. 29 Binance attack. The FBI attributed the theft to a North Korean state-sponsored group, but North Korea denied responsibility. Elliptic said linked wallets controlled nearly all trading in newly created Near tokens, limiting evidence of outside demand.
Elliptic said converted stolen assets reached about 3,000 bitcoin, worth $225 million, by Nov. 9. It estimated that only a negligible amount had likely been cashed out. Elliptic found no evidence that AI directed the transfers.
