Elliptic：朝鲜黑客借Meme币洗白Binance被盗资金
North Korea launders Binance funds with Elon Musk memecoin, report
North Korea-linked hackers who stole $6.4 billion from the world’s biggest crypto exchange Binance are reportedly laundering the stolen funds using TRON, Solana, and NEAR-based memecoins.
据报道，与朝鲜有关的黑客从全球最大的加密货币交易所币安（Binance）窃取了64亿美元，并正在使用TRON、Solana和NEAR上的迷因币（memecoins）清洗这些被盗资金。
Crypto security analysts at Elliptic claim to have linked around $430,000 worth of NEAR to the creation of six memecoins themed around various animals, including ducks and chimpanzees.
Elliptic的加密货币安全分析师声称，已将价值约43万美元的NEAR与围绕各种动物（包括鸭子和黑猩猩）创建的六种迷因币联系起来。
One of these tokens promotes Elon Musk as the future 2028 president.
其中一种代币将埃隆·马斯克（Elon Musk）宣传为2028年的未来总统。
Elliptic mapped the North Korea-linked memecoin laundering process.
Elliptic绘制了与朝鲜有关的迷因币洗钱流程。
Read more: How the Binance hack happened on-chain on Ethereum
阅读更多：币安黑客攻击在以太坊链上是如何发生的
Once sold, the profit generated by the tokens is roughly equivalent to the amount of money that went in.
一旦售出，代币产生的利润大致相当于投入的资金金额。
Elliptic believes that the tokens were used for money laundering. This is based on the fact that nobody else was trading them, that they were paid for with the proceeds from a previous linked token launch, and that they were only traded for a short amount of time before never being used again.
Elliptic认为这些代币被用于洗钱。这是基于以下事实：没有人交易它们，它们是用之前关联代币发行所得的收益支付的，并且它们仅在很短的时间内进行交易，之后就再未被使用。
It also claims the memecoins attract little attention, are cheap to produce at only $90 per launch, and can slow down investigators’ tracing efforts by introducing more steps to the stolen funds’ journey.
它还声称，迷因币受到的关注很少，制作成本仅为每次发行90美元，并且可以通过增加被盗资金旅程中的步骤来减缓调查人员的追踪工作。
Laundering group has over $43M worth of NEAR tokens
洗钱团伙拥有价值超过4300万美元的NEAR代币
Funding for the memecoins came from hacking group TraderTraitor’s crypto wallet, which contained around $43.7 million worth of NEAR.
迷因币的资金来自黑客组织TraderTraitor的加密钱包，该钱包中存有价值约4370万美元的NEAR。
Stolen funds were also traced to one token created on the TRON blockchain, and another on Solana.
被盗资金还被追溯到在TRON区块链上创建的一个代币，以及在Solana上创建的另一个代币。
Elliptic didn’t say what tool was used to create the tokens, nor did it name the decentralised exchange where the funds were sent. It only notes that these entities “did nothing wrong; the launderers simply used them as any other user could.”
Elliptic没有说明用于创建代币的工具，也没有指明资金发送的去中心化交易所的名称。它仅指出这些实体“没有做错任何事；洗钱者只是像任何其他用户一样使用了它们”。
Read more: Binance faces second probe over Iran-linked billions
阅读更多：币安面临针对与伊朗相关的数十亿美元的第二次调查
It’s not TraderTraitor’s first memecoin rodeo
这并非TraderTraitor首次涉足迷因币炒作
Elliptic spotted TraderTraitor carrying out this same memecoin laundering method in the aftermath of last year’s $1.5 billion Bybit hack.
Elliptic在去年15亿美元Bybit黑客事件发生后，发现TraderTraitor实施了同样的迷因币洗钱方法。
In this case, it used TRON-based memecoins and reportedly moved at least $24 million.
在这种情况下，它使用了基于TRON的迷因币，据报道转移了至少2400万美元。
Got a tip? Send us an email securely via Protos Leaks. For more informed news and investigations, follow us on X, Bluesky, and Google News, or subscribe to our YouTube channel.
有线索？请通过Protos Leaks向我们安全发送电子邮件。如需获取更深入的新闻和调查报道，请在X、Bluesky和Google News上关注我们，或订阅我们的YouTube频道。
更进一步：量化金融体系
看懂新闻只是起点——沿量化金融路径，把它变成能交付的工程能力