- Scam type: State-sponsored hacking
- Chain: EVM (Ethereum, BNB Chain, Base and other EVM chains)
- Project or site name: North Korean APT38: HTX heist laundering
- Incident date: 2025-11-14
- Reported: 2026-10-28
- Last updated: 2026-10-28
A Justice Department civil forfeiture complaint filed November 14, 2025 attributes virtual currency heists, including the theft from HTX (formerly Huobi), to the North Korean hacking group APT38. The complaint says the property it targets is traceable to the HTX heist and that the actors used Tornado Cash and CryptoMixer to launder proceeds. It names these BNB Smart Chain addresses. Addresses: 0x60e33A638177d376e5e8aB7dE1eF4eb5264d1768 0xb790873aC389ca77E9ef7E41704247b7C2D94EF3 0x5f48ebf8c6c3af25891130cee1b546ee3eee163c Public BNB Smart Chain records show transaction history for all 3…
Other addresses in this report: 0x60e33a638177d376e5e8ab7de1ef4eb5264d1768, 0xb790873ac389ca77e9ef7e41704247b7c2d94ef3, 0x5f48ebf8c6c3af25891130cee1b546ee3eee163c
Linked reports: Tether Frozen USDT-TRC20 Address (2024-04-09), Tether Frozen USDT-TRC20 Address (2024-04-09), Tether Frozen USDT-TRC20 Address (2024-04-09), Tether Frozen USDT-TRC20 Address (2024-04-09), Tether Frozen USDT-TRC20 Address (2024-04-09), Tether Frozen USDT-TRC20 Address (2024-04-09), Tether Frozen USDT-TRC20 Address (2024-04-09), Tether Frozen USDT-TRC20 Address (2024-04-09), Tether Frozen USDT-TRC20 Address (2024-04-09), Tether Frozen USDT-TRC20 Address (2024-04-09)