According to CoinMeta, as monitored by Chainalysis, attackers associated with North Korea began to carry out money laundering activities using the Solana network after transferring over $500 million in stolen funds from Tron. The attackers dispersed the funds through more than 1,000 addresses, over 3,000 deposits, and multiple DEFI protocols. The funds then flowed via channels such as Chainflip, Relay, Thorchain, and NEAR to dozens of new wallets on chains like Ethereum and Bitcoin.