# SlowMist Identifies On-Chain Links Among North Korea-Related Addresses

By Riza Dagoc

Canonical URL: https://www.tokenpost.com/news/regulation/50041
Published: 2026-11-06T11:30:40.000Z
Updated: 2026-11-06T11:30:40.000Z
Section: Regulation

> The listings share an Ethereum address, while wallets linked to Boykov also sent USDT to an Obertas-linked address and funds to a Bybit deposit address.

SlowMist identified on-chain connections among addresses linked to Boykov, Obertas and Kim Ki Hyok, including transfers to an address in two OFAC listings and to a Bybit deposit address.

The U.S. Treasury's Office of Foreign Assets Control (OFAC) lists the same Ethereum address in entries for Boykov and Obertas. A Boykov-linked Ethereum wallet sent about $9.88 million to that address, SlowMist found.

SlowMist also linked an address to Obertas and found that two TRON wallets linked to Boykov sent a total of 1.66 million Tether (USDT) to it.

Ethereum addresses linked to Boykov and Kim Ki Hyok also sent funds to the same Bybit deposit address. The transfers were about $4 million from Boykov's address and 50,000 Dai (DAI) from Kim's.

The U.S. Treasury announced sanctions against 10 individuals and one entity linked to North Korean IT worker networks on Oct. 28.