SomaXBT Says North Korean-Linked Hackers Moved $242 Million From Binance
Four named services handled about $140 million in combined transfers. The FBI is pressing THORChain and other services to block related transactions.

North Korean-linked hackers moved about $242 million in funds stolen from Binance through Tron and multiple cross-chain bridges over two days, on-chain analyst SomaXBT said. SomaXBT contributes to Security Alliance (SEAL).
The reported route totals include $48 million through Relay, $44 million through THORChain, $32.1 million through Chainflip and $16 million through Symbiosis. The four services handled about $140 million combined, with Relay the largest named route and THORChain second. That is about $102 million less than the overall $242 million figure, but the breakdown does not assign the difference to specific services. The funds' final destination remains unknown.
The FBI is pressing THORChain and other services to block transactions tied to the stolen funds. THORChain is both one of the named routes and one of the services facing that request.
The transfers took place over a two-day span. The breakdown names four services but does not provide a full routing map for the reported funds.