- Scam type: State-sponsored hacking
- Chain: Bitcoin
- Project or site name: North Korean exchange hacks: laundering of proceeds (2020 forfeiture, 113 accounts)
- Incident date: 2020-03-02
- Reported: 2026-10-28
- Last updated: 2026-10-28
A Justice Department civil forfeiture complaint filed March 2, 2020 describes North Korean co-conspirators' theft of virtual currency from four virtual currency exchanges, three of them based in South Korea, and the laundering of the proceeds through hundreds of automated "peel chain" transactions to other exchanges. The complaint lists these bitcoin addresses as property to be forfeited. Addresses: 113vSKMWvuM8Weee2neMScXqdtXFLvy8z7 12DCmGuX87aCzxCDneyAxZdVWapuza9UyR 12JSAKyUMFMFp2ao5Rqt3s3X4xrQMXMzkr 12urwZAF7JvdhiQcYVbNG7VtKP3165pPnf 13Bcq6AcWusG3YKsYadBRNwnfezUrhRDER…
Other addresses in this report: 113vSKMWvuM8Weee2neMScXqdtXFLvy8z7, 12DCmGuX87aCzxCDneyAxZdVWapuza9UyR, 12JSAKyUMFMFp2ao5Rqt3s3X4xrQMXMzkr, 12urwZAF7JvdhiQcYVbNG7VtKP3165pPnf, 13Bcq6AcWusG3YKsYadBRNwnfezUrhRDER, 13u7zCciSC7yGKfe8qqvQxK7BnGiwpdAbQ, 14jP1TjTjrFBVFKUMcGaPjGRHaWAK6QVr7, 14umE3q9knsWKZhjPgLQyv4rrCNjfXpAuF, 16RWbMVHvERVUjrh28rRugmrgeDW1nweoo, 17PSv7hd2cvSmgMTFw8CA3hjdYtGWuPh98, 18LX9wjgjDbmRZXYhDLzZWCQ3pkUGB6gFf, 19RfkmQPS3wBF5XhjcZwnbpMkd96GoituJ, 19V5YCatY8sfdNuskawrGmbrZEohLkqV3d, 1Ax8m2gy1Ta6vQTMStnWdCh71oMX7Z4nen, 1Bht2x8Y8tJLpXxqK9LX4ehtLNk6kh3FLk, 1C3K6yYxr1xomotxkEbMLAcm3jVKDSyFBd, 1C4hPundX3pBSiNbhkLpuLp246Ggc8gmwx, 1C5S12fBSmeVedaEAqQzFf29H9hUucojPA, 1JCWsAC86pokjDrvQsRWoU2jm9qA9Wc4qh, 1K2FgtrdGk767RoLf8dN8tr5XsVc5st6RZ
See more (40)
1L5mPKvfKzGY2J99HtpoefxqbpLDxyMAZq, 1LcsVyCd6yEyibDQS2WcxzTBT1iJGAqLhS, 1MVkopW6PPWZtSAtP4295B6KfH93YKToZU, 1Nmd7KBc3P6RgYcZ5n8ftdbw7z4jEzUSVj, 1NMpPj2zUSPodncvZGp7owP2nttAgyFuY3, 17UwTn7cVxu5ivkBnkPo83Gjtowi8dx75Q, 1A3uGGvHFBauSmjZvdZFF6gjc8VSjgF7UY, 1Bm659Wu5xVppUNRh7jKNFMboTbDepgmbm, 18atn6kuyKzhnsWK554Uj6j1PAv3sPmx2p, 18YNDeHouezsyxcvntohev9kANrMXiGBxr, 1CD483mLYrMJwZF5drZnoPKSBbFTMSVvGf, 1P8y7bj28tsq76anvKLgmhbbnTc1ZGcUVa, 1Pa32FPFQJ5VdozwmMGE1ANNWVGB3XQJie, 15pPmUErhTb8CaWF5x8iQggX3zK1y99ZN1, 1EFWRRLUM3jy2poCpY7ALq2m7PPakyvns1, 37JN1EDYCGYVabtofvyKKLtpA6uU3UBMLo, 39PAYsdx2zi7GUhV71cx1zpp1N8495t58f, 3ACmZQBNZsDDDs3UGoC6DeKMKHTe9RW1yu, 3AUHHS4NQjJRAMbjdkeTdLDv9ZFeA9n1o3, 3GAwA7PvLiHKjcmN2nsrHEpN7Qt9jwMQ4h, 3HoJydELfq2kyZk9M6yug6CLQmYCS7FrJj, 3M23QTysjRsfmJz4aDdc9RpaXjVZmbWKEt, 3Nis34RW9uGV5mbovNidNNsxRTWwwqb1PS, 1FKMe2Nyue2SDufB4RciiXsEEpAxtuBxD3, 19YVKCETP8yHX2m2VbEByVgWgJUAZd5tnS, 17KS1C6DxViF68YaSAhWUrnaCtxzbMq7CB, 1MP62xKDtbL79wQ8f8LbAg9dPpUHFTEVbJ, 1GsAS3z7eG4Vw2QbyVqnR7cRQmpeRsCpt1, 1K7cMd9RgwhThXi6VDu3Roti2W4241MLfG, 1FhsTJ7hQKvpFXPRFFjsFPHQT4pQMQpgw1, 1FzKR8XDmdrTRYfMcZRf3NPvSgyrUoG8kq, 1AsHQhhCYwgd71cxnHA9a8dWeEh22ivdqn, 1DZdJNQsEutzud3YX28DFXfzKVyEfoN8t2, 1K83LzD1QR2iUVtHckFMUzzdF3xUhtNdYb, 1DX3zJV4djK9CgCP48Ym3LEryq5RVdhWH8, 1EFNjtGnJ7WohXd8L17NGA4N5osKRj98QN, 1EU4tNd1RbhDCfkiQrtj6nfzxeRxRA9rBm, 17Wx3A1tmiTnxJ9FAq7em1n6SxtXSG4r5F, 1QBbEUUhG7CRJzJrSEnUvwrycYZzKB8YEq, 1K1fa3ydmpWMuX8gWHk5W6gnVFX7nGQJsuLinked reports: OFAC SDN — Sanctioned Bitcoin Legacy & P2SH Addresses, OFAC Sanctioned Addresses, OFAC Sanctioned XBT Address, Sanctions — money_laundering addresses, OFAC Sanctioned Addresses, OFAC Sanctioned XBT Address, Sanctions — money_laundering addresses, OFAC Sanctioned Addresses, OFAC Sanctioned XBT Address, OFAC Sanctioned XBT Address