According to CoinMeta, on November 2nd, it was indicated that among the funds stolen from Binance, over $1 billion in ETH and approximately $1.42 billion in BTC have shown limited transfer activity since the incident, while the remaining funds were quickly transferred through channels such as DEFI and cross-chain bridges. Chainalysis observed that some of the funds repeatedly flowed back to the previously used addresses across thousands of transactions, presenting a cyclical pattern different from previous North Korean hacker money laundering activities, which may involve automated operations. However, there is no evidence yet to prove that the attackers used AI. The institution believes that the current flow of funds generally conforms to the characteristics of early-stage layered money laundering after North Korean hacker attacks.