A recent report from Chainalysis, a U.S.-based blockchain analysis firm, has brought to light the alarming activities surrounding the theft of $6.3 billion from cryptocurrency exchange Binance. According to their findings, the hackers responsible for this significant breach are allegedly utilizing money laundering networks based in China to transfer portions of the stolen assets. It is widely believed that these cybercriminals are linked to North Korean hacking groups, which are employing thousands of digital wallets and multiple blockchain networks in an effort to obscure the origin of the stolen funds.
U.S. authorities have identified these hackers as members of a group known as “TraderTraitor,” which has previously been associated with other hacking incidents involving the use of Chinese money laundering operations.
Chainalysis has tracked hundreds of thousands of dollars from the Binance hacking event flowing into these money laundering networks. The firm highlights that these inflows include proceeds funneled through over-the-counter (OTC) trading platforms, suggesting that the hackers are endeavoring to siphon off funds from the blockchain ecosystem and cash out into traditional fiat currencies.
The modus operandi of this attack predominantly involves dissecting the stolen funds into smaller amounts, exchanging them for various cryptocurrencies, and transferring assets across different blockchains. In a notable development, North Korea has outright denied any involvement in this cyberattack.
According to data from Chainalysis, around $500 million has been transferred through the TRON blockchain by the hackers. They took advantage of multiple trading protocols on TRON— a platform previously implicated in illicit trading— to scatter the funds across more than 1,000 addresses, culminating in transfers to wallets on Ethereum, Bitcoin, and other networks.
A spokesperson for Binance stated via email that the company is actively collaborating with law enforcement agencies, blockchain intelligence firms, stablecoin issuers, and various other entities to track and freeze assets linked to this hacking incident.
“This kind of large-scale attack followed by money laundering behavior is to be expected, but it leaves a trace,” the spokesperson remarked. “Every financial transaction on the blockchain yields new intelligence for Binance, law enforcement, blockchain analysts, issuers, and our industry partners, which helps us track, tag, and freeze the relevant assets.”
A representative of TRON DAO echoed this sentiment, emphasizing that the company has a solid track record of working alongside law enforcement and analysis firms to combat illegal activities that exploit blockchain technology.
The spokesperson elaborated, “As an open-source decentralized protocol, TRON may be exploited by independent third parties, but any successful technology can be misused by malicious actors.”
The cryptocurrency sector has proven to be instrumental in assisting Binance to freeze approximately $3 billion of the stolen assets, successfully preventing the hackers from transferring these funds. Moreover, it’s reported that an additional $2.42 billion in cryptocurrency losses, predominantly in Bitcoin and Ethereum, has seen little movement since the hacking incident.
Nevertheless, Chainalysis has indicated that the remaining $1 billion in stolen assets has started to be channeled through Chinese money laundering avenues. Thus far, only a small fraction of these stolen assets appears to have entered these laundering networks.
Looking ahead, Chainalysis predicts that the attackers will continue to exchange cryptocurrencies and will ultimately seek to cash out through brokers and exchanges. This process may stretch out over several months, owing to the complexities involved in fully liquidating the assets.
Binance reported the theft on October 29, marking it as the largest cryptocurrency hacking incident to date. On Tuesday, the exchange revealed that the attackers exploited methods including fraudulent job interviews and malware to gain access to their systems.
As for the market, as of November 6, Bitcoin was trading at $75,000, reflecting a 13% decrease throughout this year. The ramifications of this attack could have long-lasting effects not only on Binance but also on the wider cryptocurrency ecosystem as stakeholders grapple with the security threats posed by organized cybercrime.