On-chain analyst Ai Yi said wallets tied to the suspected North Korean attackers behind the Binance incident made several operational mistakes while moving stolen assets. According to the monitoring, the group sent roughly $3.5 million worth of multiple tokens to the NEWT contract address, failed to check liquidity conditions before selling PROM, and ended up receiving only $71 from tokens valued at about $5 million. The analyst also said the actors used MetaMask to sponsor gas fees, a step that may have left off-chain traces such as IP-related logs. In another transfer, about $250,000 was deposited to Gate, which has already frozen two related accounts and said it will assist with the follow-up investigation. The analysis added that when stolen assets span more token types and pass through more trading steps and intermediaries, attackers are more likely to leave traceable clues, which could help Binance track the later flow of funds.
Odaily reported that on-chain analyst Ai Yi has flagged a series of mistakes made by suspected North Korean hackers while moving assets linked to the Binance attack.
Several transfer errors were identified
According to Ai Yi's monitoring, the wallets in question sent multiple tokens worth about $3.5 million to the NEWT contract address. In another move, the actors failed to check liquidity pool conditions before selling PROM, which meant tokens valued at roughly $5 million brought in only $71.
The analyst also said the group used MetaMask to cover gas fees, a step that may have left off-chain operational records, including possible IP-related logs.
Gate froze two related accounts
Beyond the on-chain transfers, about $250,000 was deposited to Gate. The exchange has frozen two related accounts and said it would assist with the follow-up investigation.
The analysis said that the more types of stolen assets are involved, and the more trading steps and intermediaries are used, the easier it becomes for attackers to leave clues that can be traced. That may also help Binance follow the later movement of the funds.
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.
