North Korean hackers have moved stolen Binance cryptocurrency worth $242 million onto the Solana blockchain, continuing their $500 million laundering operation that began with a $500 million hack on Tron.
The Solana migration follows Chainalysis reporting showing $140 million in stolen funds traced through four Tron exit routes in a coordinated money laundering scheme. The analyst identified specific transaction patterns used to move the stolen funds from Tron to Solana, showing how the hackers are diversifying their laundering methods across multiple blockchain networks.
"The movement to Solana represents a strategic shift in the laundering operation," Chainalysis said in their analysis. "After establishing multiple exit points on Tron, the hackers are now exploiting Solana's relative anonymity and faster transaction speeds to move funds further from their original source."
The North Korean Lazarus Group, believed to be behind the original Binance hack, has been using Tron as their primary laundering hub since the initial $500 million theft. The FBI has increased pressure on THORChain recently, forcing the hackers to find alternative routes to convert their stolen cryptocurrency into usable funds.
Solana has become an attractive destination for crypto launderers because it offers faster transaction speeds and lower fees compared to Ethereum, while still maintaining a level of privacy that makes tracking difficult. The blockchain's growing DeFi ecosystem also provides more opportunities to launder funds through complex financial transactions.
"The Solana ecosystem has become a preferred route for money launderers looking to move funds quickly and efficiently," said a blockchain security expert. "The network's fast settlement times and relatively low transparency make it an attractive option for those looking to hide the origins of their funds."
The discovery of the Solana transfer comes as regulators worldwide increase their focus on cryptocurrency money laundering. The Treasury Department's Financial Crimes Enforcement Network has issued new guidelines for crypto exchanges to better detect and report suspicious transactions, particularly those involving North Korean-linked wallets.
---ANALYSIS---
The $242 million Solana transfer is part of a larger $500 million laundering operation that began with the Binance hack. The Hacker group's sophisticated approach demonstrates their ability to adapt to increased regulatory pressure and law enforcement scrutiny.
The Chainalysis analyst traced the $140 million through four specific Tron exit routes, showing how the hackers systematically moved funds through different addresses and pools to obscure their origins. Each route had unique characteristics that helped the launderers avoid detection by blockchain analytics tools.
"The exit routes show clear signs of coordinated money laundering," the analyst noted. "The hackers are using multiple pathways to make it harder for investigators to follow the money trail."
North Korean hackers have been under increased pressure from the FBI, which recently announced a crackdown on THORChain and other cross-chain bridges used for money laundering. The THORChain protocol, which allows users to swap assets across different blockchains without centralized intermediaries, has become a focal point in the investigation.
The shift to Solana represents a tactical response to the increased scrutiny on THORChain and other blockchain bridges. Solana's faster transaction speeds and lower fees make it an attractive alternative for those looking to quickly move large amounts of cryptocurrency.
---REGULATORY IMPACT---
The discovery has prompted calls for stronger regulation of the Solana ecosystem and other emerging blockchain networks. Lawmakers are considering new legislation that would require crypto exchanges to implement more robust know-your-customer (KYC) procedures and transaction monitoring systems.
Financial institutions are being urged to enhance their compliance programs to better detect and report suspicious cryptocurrency transactions, particularly those linked to North Korean hacking groups.
---OUTLOOK---
The ongoing investigation into the Binance hack and its aftermath continues to reveal the evolving tactics of cryptocurrency criminals. As regulators and law enforcement agencies increase their focus on blockchain-based financial crimes, the crypto industry faces mounting pressure to implement more effective anti-money laundering (AML) measures.
The Solana transfer shows the need for enhanced cross-blockchain monitoring tools and greater cooperation between different cryptocurrency platforms to combat financial crime effectively. Regulators worldwide are working to close loopholes that allow criminals to move funds across different blockchain networks with relative ease.