North Korean Hackers Launder Stolen Crypto Through Chinese Organized Crime, Settling in Yuan
North Korean hackers, identified by the FBI as the TraderTraitor group, are employing a sophisticated four-stage process to launder billions in stolen cryptocurrency, with the final stage involving settlement in yuan through Chinese organized crime. After stealing approximately $6.36 billion from Binance hot wallets across ten blockchains, the hackers convert freezable stablecoins into non-freezable assets like ETH. They then fragment the crypto trail using Bitcoin peel chains, cross-chain bridges, and swap services. The third stage involves cashing out the crypto through over-the-counter (OTC) brokers linked to Chinese organized crime, often at a discount. Finally, the funds are settled in yuan, as nearly all of North Korea's trade is conducted through China, fulfilling most of its financial needs. This laundering method highlights the intricate connection between cybercrime and international financial networks.