TREE NEWS update: The US Treasury’s Office of Foreign Assets Control sanctioned 10 individuals and one entity tied to a North Korean IT worker network. SlowMist’s MistTrack analysis of the listed crypto addresses found shared on-chain links: one Ethereum address listed under both Boykov and Obertas received about $9.88 million from Boykov, while Boykov’s two TRON addresses sent 1.66 million USDT to an Obertas address. Boykov and Kim Ki Hyok’s Ethereum addresses also sent funds to the same Bybit deposit address.
OFAC Sanctions North Korea IT Worker Network; SlowMist Finds On-Chain Fund Links
The value here is evidentiary: SlowMist's tracing turns a sanctions designation into a map of shared infrastructure, showing the same deposit addresses and fund flows serving multiple listed individuals. That matters for exchanges and compliance teams, because address-level overlap is exactly what screening systems are built to catch, and it suggests the network's operational security was weaker than its dispersal across chains implies. Whether this cluster reflects a broader pattern of shared wallets across DPRK-linked IT worker operations, and whether exchanges act on the published addresses, is the open question worth watching.
Generated by AI for reference only.
Share on WeChat
Open WeChat → Scan → then tap "…" to send to a chat or Moments.
Tap "…" in the top-right corner to send to a chat or share to Moments.