# Elliptic Traces $430,000 in Stolen Binance Funds Through NEAR Meme Coins By Simon Yoon Canonical URL: https://www.tokenpost.com/news/technology/53007 Published: 2026-11-10T10:50:16.000Z Updated: 2026-11-10T10:50:16.000Z Section: Technology > Six tokens launched Nov. 5-7 and used separate liquidity pools. About 117,000 NEAR passed through them, worth about $430,000 at current prices. Six new meme coins on NEAR Protocol routed about 117,000 units of its native token, NEAR, stolen in the Binance hack through liquidity pools, adding steps to the tracing process. Elliptic linked the operation to North Korean actors. It estimated that about 117,000 NEAR passed through the six tokens. At current prices, that amount was worth about $430,000. The tokens — FUK, OLCCL, MEILI, MMLI, DABI and SINU — launched between Nov. 5 and Nov. 7. Each was paired with NEAR in its own liquidity pool. Wallets funded with stolen NEAR bought the tokens through the pools. A separate group of wallets then sold them to receive NEAR, avoiding direct transfers between the two groups. Wallets involved in the operation drove nearly all the trading, leaving little outside demand for the tokens. The swaps remained visible onchain; the added steps slowed tracing but did not conceal the funds. Similar methods appeared on Tron, while a related route on Solana used existing tokens. Elliptic said it first observed the token-and-pool method after the 2025 Bybit hack. The activity adds to [Elliptic’s earlier tracing of Binance hack funds across 12,000 wallets](). Elliptic advised compliance teams to examine what enters a liquidity pool before treating funds withdrawn from it as clean. ## Links in this article - [Elliptic’s earlier tracing of Binance hack funds across 12,000 wallets](https://www.tokenpost.com/news/technology/46389)