0x63e842b054bd624a465454d533c33f573e9c6fae

0x63e842b054bd624a465454d533c33f573e9c6fae is a cryptocurrency wallet address that one published source reports in connection with APT38 activity, which public reporting attributes to North Korea (DPRK). It is cited here from Bitquery. The report is dated 2026-10-30.

wallet address APT38 MATCHED IN SOURCE

Listed as Ethereum

First seen 2026-10-30 · last seen 2026-10-30

Source

  • …Binance wallet the USDC came from 0x7c8601d4645b93cea45f71e118a729332e6b5ca0 The attacker's caller wallet 0x63e842b054bd624a465454d533c33f573e9c6fae The code Binance 14 was made to run 0xad99264d5532ae0dd04b2004eebda05f25657e70dacb764f7ac8d4ccd051298b The setup with 50 approvals,…
    Binance Hack: $6.3B Drained on 9 Chains, $2.8B Frozen - Bitquery — Bitquery · under “12 · The record The addresses behind the Binance hack” · published 2026-10-30 · pulled 2026-11-12

Find this indicator in the index, or see every cryptocurrency wallet address this site holds under Cryptocurrency wallet addresses in the browse listing.

Related indicators

Cited by the same report: Binance Hack: $6.3B Drained on 9 Chains, $2.8B Frozen - Bitquery

Bitquery lists 9 other indicators in this source.

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. See the sourcing methodology.