7SDuVQ2SkaHBURbxzyXAr8coNcLV2ZuSLkteoRYfQ2fK

7SDuVQ2SkaHBURbxzyXAr8coNcLV2ZuSLkteoRYfQ2fK is a cryptocurrency wallet address that one published source reports in connection with APT38 activity, which public reporting attributes to North Korea (DPRK). It is cited here from @banthisguy9349. The report is dated 2026-11-01.

wallet address APT38 RESEARCHER POST

First seen 2026-11-01 · last seen 2026-11-01

Source

  • The researcher reports that the Solana wallet of the Binance hacker began moving funds to a new Solana wallet, linking the new wallet, 7SDuVQ2S..., on Solscan with a capture of a transfer labelled as from a Binance exploiter wallet, and in a reply gives both addresses as the ones to watch. In other posts the same day he writes that North Korea went too far with this hack and that people were sending 'Lazarus Group' tokens to the new Binance hacker wallets. The FBI attributes the Binance theft to the North Korean actors it calls TraderTraitor (Justice Department release of 12 November 2026); that these two wallets hold its proceeds is the researcher's reading of the chain, not the FBI's or this site's. Read on 12 November 2026 with the reply.
    x.com/banthisguy9349/status/2116918361506652632 — @banthisguy9349 · under “Binance exploit of October 2026: Solana wallets” · published 2026-11-01 · pulled 2026-11-12

Find this indicator in the index, or see every cryptocurrency wallet address this site holds under Cryptocurrency wallet addresses in the browse listing.

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. See the sourcing methodology.