North Korean hackers used six meme coins to launder $430,000 in stolen NEAR, Elliptic says

Elliptic’s findings sit at the intersection of blockchain tracing and sanctions enforcement, where investigators try to follow stolen assets as they move across short-lived tokens and exchanges. NEAR and meme coins are both liquid, on-chain assets, which makes them usable in public transfers even when the tokens themselves are thinly structured or quickly discarded. The North Korea link matters because the country’s hackers have long been associated with large-scale crypto theft and laundering efforts.

For exchanges, this kind of activity means standard monitoring has to catch more than obvious wallet-to-wallet jumps. Disposable meme coins can add another layer between stolen assets and cash-out points, so compliance teams have to watch token creation, routing patterns, and rapid token turnover. Builders and operators who support broad asset lists face more pressure to tighten screening and tracing controls. (per cryptobriefing.com)

The wider tension is between the open, permissionless design of crypto rails and the fact that the same rails can be used to disguise stolen funds at speed. Meme coins are usually treated as speculative or community-driven assets, yet this case shows they can also be assembled into temporary laundering tools. That puts pressure on a system that was built for borderless transfer but now has to deal with criminal use that is increasingly modular.

Still open is how far this pattern extends beyond the specific NEAR and Binance-related transfers Elliptic described, and which wallets, services, or token deployments were involved end to end. The reports do not settle whether the coins were created by the same actors across every step, or how much of the trail was recovered after the Nov. 5 to Nov. 7 window. More detail from on-chain tracing or enforcement action would be needed to map the full route.

NEAR ProtocolNEAR it is the asset of the company or protocol in the event

NEAR Protocol fell 0.8% in the 4 hours after the first headline, after rising 2.8% in the 2 hours before.

34 prices, one every 30 minutes · The move was larger before the first headline than after: an observation, not an explanation. The market also moves on things nobody publishes.