North Korean Hackers Automate $6.4B Crypto Laundering Across 11 Blockchains
Elliptic reports North Korean hackers are laundering a record $6.4 billion Binance heist using sophisticated automation across 12,000 wallets and 11 blockchains.
Elliptic reports North Korean hackers are laundering a record $6.4 billion Binance heist using sophisticated automation across 12,000 wallets and 11 blockchains. Solana (SOL) is trading at $93.63, up 0.4% since this brief published. This is an original TLT brief synthesising 2 outlets (The Daily Hodl, Coinfomania), plus live market data, as of Tue, 03 Nov 2026 22:00:04 UTC.
This massive laundering operation highlights the growing sophistication of North Korean cybercriminals and their ability to exploit cross-chain vulnerabilities, posing significant security challenges for the crypto ecosystem and regulators.
- North Korean hackers laundering $6.4B Binance heist via 12,000 wallets and 11 blockchains.
- Laundering process automated, with new wallet used every 25 seconds.
- $1.46M moved through Jupiter Lend and Circle's cross-chain bridge.
- Jupiter's TVL at $2.2B, up 0.8% in past week.
The Daily Hodl and Coinfomania both report that North Korean hackers are laundering a record $6.4 billion Binance heist using sophisticated methods involving 12,000 wallets and 11 blockchains. The Daily Hodl cites Elliptic's analysis that the process is 'clearly automated,' with a new wallet used every 25 seconds and involving 40,000 transactions. Coinfomania adds that $1.46 million has been moved through Jupiter Lend and Circle's cross-chain bridge, highlighting specific platforms exploited in the operation. No discrepancies in the core figures were found between the outlets.
- OneKey CEO Warns BlackRock's Bitcoin ETF Could Be Next Target for North Korean Hackers
- North Korean Hackers Automate $6.4B Crypto Laundering Across 11 Blockchains — this brief
North Korean hackers are executing a highly sophisticated laundering operation involving $6.4 billion in crypto assets stolen from Binance, according to blockchain analytics firm Elliptic. The operation utilizes an automated system that generates a new wallet approximately every 25 seconds, with the entire process involving 40,000 transactions across 12,000 wallets and 11 different blockchains.
This complex operation demonstrates the growing technical capabilities of North Korean cybercriminals, who are exploiting cross-chain bridges and other decentralized finance (DeFi) tools to move large sums of money rapidly and with increased anonymity. The use of multiple blockchains suggests an attempt to evade detection and complicate efforts to trace the stolen funds.
Coinfomania reports that $1.46 million from the heist has been moved through Jupiter Lend and Circle's cross-chain bridge, indicating specific platforms targeted in the laundering process. This detail underscores the vulnerabilities present in cross-chain infrastructure and the challenges faced by security teams in protecting these systems.
The scale of the operation is unprecedented, surpassing previous records for crypto heists. The stolen funds represent a significant portion of the total crypto market cap, which currently stands at $2.67 trillion. The laundering activity comes amid a relatively flat market, with 
Bitcoin up 0.86% in the past 24 hours and the Fear & Greed Index at 26, indicating a 'Fear' sentiment among investors.
Jupiter's total value locked (TVL) is $2.2 billion, having increased by 0.8% in the past week, according to DeFiLlama. This suggests that despite the security concerns raised by the laundering activity, some DeFi platforms continue to attract capital.
Since this brief published about 14 hours ago, Solana (SOL) has moved from $93.22 to $93.63 — +0.44%.
The chart plots SOL's price: grey is the move before this brief published, the vertical dashed line marks the moment it published, the horizontal dashed line is the price then, and the coloured area is the move since — from TLT's market data (daily resolution). It shows what happened after the news, not that the news caused it; many factors move prices. Not financial advice.
At today's peer-to-peer rate, 1 SOL ≈ ₦129,537.11 (about $93.63), up 1.6% over 24 hours. The naira itself trades about 2.8% above the official rate on the P2P market, so a Nigerian buyer's effective cost differs from the headline dollar price.
Live market data
Current prices for the asset in this story — live, source-stamped, updated every 15 minutes.
Figures and sectors in this story, checked live against on-chain aggregators · November 3, 2026.
TLT reads these figures directly from on-chain aggregators (DeFiLlama, mempool.space) at build time — independent of what any outlet reported. Sector totals aggregate every protocol DeFiLlama tracks in that category. Values are live and will change.
North Korean Hackers Automate $6.4B Crypto Laundering Across — questions & answers
How much money was stolen in the Binance heist?
The total amount stolen was $6.4 billion.
How are the hackers moving the stolen funds?
The hackers are using an automated system that generates a new wallet every 25 seconds and moves funds across 11 different blockchains.
What is the significance of the Jupiter Lend and Circle cross-chain bridge?
The movement of $1.46 million through these platforms highlights the vulnerabilities in cross-chain infrastructure and the specific tools exploited by the hackers.
How much is 1 Solana worth in naira today?
About ₦129,537.11 at the live peer-to-peer (P2P) USDT rate, which is what Nigerians typically trade at — equivalent to roughly $93.63. The naira price moves with both SOL's US-dollar price and the USDT/NGN rate; use our Solana in naira page for any amount.
Has Solana's price moved since this brief was published?
SOL is up 0.44% since this brief first published — trading at $93.63 now versus $93.22 at publication. TLT re-checks this figure against CoinGecko and Binance every 15 minutes.
Which outlets reported this story?
This is an original TLT brief that synthesises reporting from The Daily Hodl, Coinfomania, with the key figures cross-checked for agreement across them. It is not a copy of any one article — follow the source links above for the original reporting.
Original summary — not financial advice. This is an original TLT brief that summarises a development reported elsewhere and adds live market data for context; it is not the original article and reproduces no part of it. Follow the source link above for full details. Crypto is volatile and high-risk — always do your own research.