North Korean hackers transferring stolen Binance funds make repeated mistakes: $5 million in PROM cashed out for only $71, two accounts frozen

Odaily reports: According to monitoring by on-chain analyst Ai Yi, the North Korean hackers suspected of attacking Binance made multiple operational errors while transferring stolen assets: first, they transferred various tokens worth approximately $3.5 million to the NEWT contract address; second, they failed to check the liquidity pool status, causing PROM tokens worth approximately $5 million to be sold for only $71; third, they used MetaMask to pay Gas fees on their behalf, which may leave off-chain operation logs such as IP addresses; fourth, they deposited approximately $250,000 to Gate, and Gate has frozen two related accounts and stated it will assist with the follow-up investigation.

Related analysis suggests that the more types of stolen assets there are and the more complex the transaction links and parties involved, the easier it is for attackers to leave tracking clues, which may also help Binance subsequently trace the flow of funds.