Elliptic

Exposure to the $6.43 billion stolen from Binance presents significant sanctions risks for firms that handle cryptoassets. TraderTraitor hasn’t been specifically designated to date, but it’s closely affiliated with designated North Korean state actors, and OFAC-administered sanctions prohibit exporting financial services to North Korea. David Carlisle sets out what compliance teams should check, from indirect exposure to continuous monitoring and look-backs. Acting also gives law enforcement information that could support further asset freezing. ➡️ hubs.la/Q04D03yW0

North Korea is laundering the $6.43 billion stolen from Binance, and it’s moving fast. Join our briefing as we explore how the attack unfolded, how Elliptic attributed it and traced the funds through thousands of new wallets, bridges, decentralized exchanges, lending vaults and mixers. Nov 4, 9am ET | Nov 5, 4pm SGT Register here ➡️ hubs.la/Q04C_Y8Z0

Binance hack update: the laundering is running on conventional automation, with about 12,000 wallets on 11 blockchains and more than 40,000 transactions in under four days. ➡️ $3.24 billion still sits in linked addresses, mostly ETH and BTC ➡️ $2.85 billion has been frozen ➡️ The first mixing has started, with about 28 BTC ($2.2 million) run through Wasabi-style coinjoins Read the full analysis: hubs.la/Q04CZ-wP0

Yvonne Ng, our VP APAC, invites you to drop by our booth at HKFTW. Ask us about the Elliptic Standard, a free framework for judging agentic on-chain risk, and our free compliance certification. UK Pavilion, Hall 5BC, 5BC-CA09, today and tomorrow. #HKFTW

Day 1 at HKFTW, and the Elliptic team is on the floor 👋 UK Pavilion, Hall 5BC, 5BC-CA09, today and tomorrow. Ask us how stolen crypto moves across blockchains and how to check your own exposure. Arda is on stage tomorrow 2:15pm, Hall 5FG. #HKFTW

The Binance hack is laundering on autopilot. The main Tron distribution wallet has paid out every hour for 31 hours. Its longest pause was 46 minutes, and swaps into THORChain repeat the same amounts, with one value appearing 19 times. When a bridge rejected deposits, the funds were re-sent automatically from new wallets. The timing looks programmed. For anyone screening, a wallet that clears today can receive funds from this cluster hours later. One-off checks and static lists won’t catch it. Screen continuously and set alerts. Elliptic’s free blocklist of exploit addresses is updated as our investigators trace new ones. Figures are Elliptic data as of 08:11 UTC on October 31 and will move. hubs.la/Q04CYFlc0

Elliptic has published its Binance exploit blocklist through a public Model Context Protocol (MCP) server, so you can check addresses against it from Claude and other AI assistants. ➡️ hubs.la/Q04CY4gP0 It’s free, with no account or API key, and serves the same addresses as the CSV download. The list now holds more than 2,800 addresses and grows as our investigators trace new ones. The attacker is still moving funds, so check new deposits and withdrawals against it now.

Elliptic has published a free blocklist of the addresses tied to the $6.43 billion Binance exploit The list currently holds 48 addresses and Elliptic's Intelligence Team will update this in real time as new addresses are identified. Access it here ➡️ hubs.la/Q04CVhM20

On October 29, $6.43 billion in cryptoassets was stolen from Binance, in what is almost certainly the largest theft of any kind in history. Elliptic has verified $2.84B (44%) frozen and believes North Korea-linked actors are behind it. Read the full breakdown ➡️ hubs.la/Q04CS7cp0

Addresses linked to the $5bn+ Binance hack are now labelled in Elliptic, so our customers are screening against them in real time while funds are still moving. We’re adding more as our intel analysts continue to investigate, and as we continue to work closely with Binance’s team on the response.

The Financial Stability Board’s final AI sound practices call for firms to keep records showing which AI agent took each action, and to name an accountable person for each agentic use case. Both expectations are in its final Sound Practices for Responsible Adoption of AI, published on October 15. The 12 practices also tell firms to run due diligence on every third-party AI provider, but they stop short of saying what a provider should be able to evidence. The Elliptic Standard sets that out for on-chain risk. Elliptic's Global Head of Policy and Regulatory Affairs, Meera Judge, read the two side by side to show where they converge and what compliance teams should require of any provider of agentic on-chain risk management solutions. hubs.la/Q04CC4v70

The on-chain AI economy needs rails. It also needs rules. Join Arda Akartuna on the panel “Agentic Payments: Building the Rails for Onchain AI Economy” at #HKFintechWeek. 🗓️ Tue 3 Nov, 2:15 PM 📍 HKCEC, Hall 5FG Meet us at the UK Pavilion, 5BC-CA09, or book a meeting: hubs.la/Q04CrBGt0

The FSB, HKMA and FCA all moved on AI accountability in the same week. The latest crypto regulatory affairs update from Elliptic's David Carlisle covers: - What the FSB, HKMA and FCA now expect from firms using AI - The OCC’s final GENIUS Act rule, which leaves stablecoin yield to case-by-case review - The FCA’s proposed guidance for regulated firms offering decentralized finance services - Switzerland’s first retail Bitcoin ETF Read the full update: hubs.ly/Q04Cv86V0

🇭🇰 We will be at #HKFintechWeek, UK Pavilion 5BC-CA09. 🎤 Arda Akartuna, Crypto Threat Intelligence Lead, APAC, on “Agentic Payments: Building the Rails for Onchain AI Economy”, 3 November, 14:15 To discuss your crypto risk priorities, book a meeting: hubs.la/Q04CqQQH0

Regulators around the world now hold companies accountable for every decision their AI agents make. The Elliptic Institute's Certified agentic on-chain risk practitioner course teaches those skills in 90 minutes, for free, with a certificate at the end. Read what each regulator expects and how you can get certified today: hubs.la/Q04B-W6X0

An AI agent that pays in milliseconds leaves no time for a person to approve each payment. Elliptic's June Lau joined ASEAN bankers and regulators at a GFTN roundtable in Bangkok last week. The overall view was that human oversight still applies, but it needs to move earlier, into the limits a company sets before any agent goes live. On a public blockchain, those limits have to cover which wallets the agent pays. June explains what that means for AI agent guardrails: hubs.la/Q04B-Nlw0

In 2026, Elliptic has tracked more than 60 suspected DPRK-linked attacks on the crypto ecosystem. The recent exploit of Bitget pushed the year's suspected total past $1 billion. Join Elliptic's Intelligence Team on Thursday October 29 to trace how the laundering has evolved: hubs.la/Q04Bn0Cj0