ChainCatcher report: According to ZachXBT, an anonymous source shared data stolen from North Korea’s internal payment server, encompassing 390 accounts, chat logs, and cryptocurrency transaction records. Since late November 2025, the associated payment wallet addresses have received over $3.5 million, with funds transferred via exchanges or converted into fiat currency through platforms like Payoneer and deposited into Chinese bank accounts. On-chain tracking reveals links between these internal payment addresses and known clusters of North Korean IT workers; one Tron payment address was frozen by Tether in December 2025. Three affiliated companies on the user list have been sanctioned by OFAC, including Sobaeksu. ZachXBT has compiled a complete organizational chart, with data covering the period from December 2025 to February 2026.
ZachXBT Reveals Stolen Data from North Korean IT Workers' Payment Server
ChaincatcherShare
Summary
ZachXBT published on-chain evidence revealing that stolen data from North Korea’s internal payment server has been exposed, including 390 accounts, chat logs, and cryptocurrency transaction records. The wallets associated with this server have received over $3.5 million since late November 2025, with funds routed through exchanges and fiat platforms such as Payoneer to Chinese bank accounts. On-chain analysis links these addresses to North Korean IT worker groups, with one Tron address frozen by Tether in December 2025. Three sanctioned entities, including Sobaeksu, appear in the data. ZachXBT has released an updated organizational chart covering December 2025 to February 2026, providing new insight into the financial flows affecting global inflation data.
Source:Show original
Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information.
Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.