4 TRON addresses a DOJ forfeiture complaint ties to a North Korean IT-worker theft (March 2024)
- Scam type: State-sponsored hacking
- Chain: Tron
- Project or site name: North Korean IT workers: March 15, 2024 theft from Company 1
- Incident date: 2025-01-06
- Reported: 2026-10-28
- Last updated: 2026-10-28
A Justice Department civil forfeiture complaint filed January 6, 2025 says North Korean IT workers use false identities to get remote developer jobs at virtual currency companies and then exploit those companies' smart contracts to steal funds. The complaint describes the March 15, 2024 theft of virtual currency from a company it calls Company 1 and the laundering that followed. It names these TRON addresses. Addresses: TRGCZn18Y5FJ3Mi8F8LS3G7PSWoQui2h9f TBpMpQ9cF6iYWk5vrFm8pn8wGAjKoCuJJ2 (the complaint says it was associated with the Binance exchange) TQnHK9iYA3xaLtVZgMBY96baBRsgAdpqGk (the…
Other addresses in this report: TRGCZn18Y5FJ3Mi8F8LS3G7PSWoQui2h9f, TBpMpQ9cF6iYWk5vrFm8pn8wGAjKoCuJJ2, TQnHK9iYA3xaLtVZgMBY96baBRsgAdpqGk
Linked reports: Tether Frozen USDT-TRC20 Address (2024-03-19), Tether Frozen USDT-TRC20 Address (2024-03-19), Tether Frozen USDT-TRC20 Address (2024-03-19), Tether Frozen USDT-TRC20 Address (2024-03-19), Tether Frozen USDT-TRC20 Address (2024-03-19), Tether Frozen USDT-TRC20 Address (2024-03-19), Tether Frozen USDT-TRC20 Address (2024-03-19), Tether Frozen USDT-TRC20 Address (2024-03-19), Tether Frozen USDT-TRC20 Address (2024-03-19), Tether Frozen USDT-TRC20 Address (2024-03-19)