`0x8d53903625b8e839b9df4bd28b0efb1cd6b8639a`

0x8d53903625b8e839b9df4bd28b0efb1cd6b8639a is a cryptocurrency wallet address that 2 published sources report in connection with APT38 activity, which public reporting attributes to North Korea (DPRK). It is cited here from Rekt and Bitquery. The earliest of those reports is dated 2026-10-30 and the most recent 2026-11-06.

wallet address APT38 MATCHED IN SOURCE

Listed as Ethereum

First seen 2026-10-30 · last seen 2026-11-06

Sources

…Aave Borrowing Wallet: 0x8d53903625b8e839b9DF4bd28B0EFb1CD6b8639A The stablecoins became collateral; borrowed WETH came out.…
Rekt - Binance - Rekt — Rekt · under “Beat the Blacklist” · published 2026-11-06 · pulled 2026-11-12
…Main receiver, holds the frozen stablecoins 0xa97bf7836f8a08f9ed91d41453d371493fae8d10 Second receiver 0x8d53903625b8e839b9df4bd28b0efb1cd6b8639a Wallet with the Aave loan, frozen by Tether at 21:02:47 0x65bd82f19985a569ef87b3926dd5f2247ba7bd06640141060f1b2d9ddedec3f6 Its 50M…
Binance Hack: $6.3B Drained on 9 Chains, $2.8B Frozen - Bitquery — Bitquery · under “12 · The record The addresses behind the Binance hack” · published 2026-10-30 · pulled 2026-11-12

Find this indicator in the index, or see every cryptocurrency wallet address this site holds under Cryptocurrency wallet addresses in the browse listing.

Related indicators

Cited by the same report: Binance Hack: $6.3B Drained on 9 Chains, $2.8B Frozen - Bitquery

Bitquery lists 9 other indicators in this source.