North Korea’s Crypto Coup: How $2 Billion Was Laundered and Now Arrested

North Korean authorities have just nabbed a cadre of ex‑military hackers who allegedly siphoned $2 billion in crypto from state banks.

Silk Road to Seoul: The Laundering Blueprint

■The hackers breached the Central Bank and Foreign Trade Bank’s internal systems, diverting $2 billion in crypto.

■Funds were moved into overseas wallets, then swapped for USD and CNY by Chinese brokers.

■Transfers were split into micro‑amounts and routed via encrypted messaging, unregistered phones and wireless gear.

Financial Pathways: From Crypto to Cash

■Chinese traders in Sinuiju and Hyesan exchanged crypto for cash in real time.

■The laundering chain mirrors tactics used by North Korean hacking groups in prior $2 billion crypto thefts.

■Daily NK’s source cites a national intelligence agency that detected foreign‑currency approval discrepancies and suspicious IP activity.

Global Sanctions and the Chinese Intermediary

■Multinational sanctions‑monitoring reports highlight Chinese OTC traders as pivotal in converting stolen crypto to fiat.

■The route exemplifies how state‑backed actors circumvent sanctions through cross‑border crypto flows.

Market Ripple: Binance’s Resilient Share

■Despite broader market outflows, Binance retained 55 % of user funds and 24 % of spot volume.

■Net inflows into Binance in early July underscore its dominance in the crypto ecosystem.

Strategic Implications for Crypto Compliance

■The arrest underscores the need for tighter KYC/AML controls on cross‑border crypto transfers.

■Exchanges must audit partner OTC channels to mitigate state‑sponsored laundering risks.

The crackdown signals a tightening of cross‑border crypto flows, compelling exchanges to bolster compliance frameworks and governments to refine surveillance mechanisms.