Elliptic traced North Korean laundering of proceeds from the $6.4 billion Binance theft through disposable tokens and decentralized-exchange liquidity pools on Tron and NEAR, with a related technique used on Solana. Six newly created NEAR meme tokens moved approximately 117,000 stolen NEAR, worth about $430,000, between separately controlled buying and collecting wallets. The report attributes the Binance theft to TraderTraitor and links the method to the cluster’s earlier laundering of at least $24 million from the 2025 Bybit theft. The swaps remain traceable but create inexpensive layers that delay investigators and can obscure the provenance of funds received from liquidity pools.