The laundering of the $6.4B Binance theft has picked up a new layer: throwaway meme tokens created solely to move stolen funds through DEX liquidity pools. The technique has appeared on Tron and NEAR, with a close variant on Solana, and was first seen in the laundering of the 2025 Bybit hack.

Between November 5 and 7, the launderers created at least six tokens on NEAR, including FUK, SINU and one branded "Elon 2028 President", each paired with NEAR in its own pool. One set of wallets bought the tokens with stolen NEAR, a second set sold them back and withdrew the real asset, so funds never moved directly between the two.

About 117,000 NEAR (around $430,000) passed through the six tokens, while roughly 11.8M NEAR ($43.7M) from the theft has not moved yet.

Each token cost about $90 to create, was traded only by wallets in the laundering network and was abandoned within days. The trail remains visible on-chain, but every extra hop slows investigators, and funds arriving from a liquidity pool can sit just two swaps away from stolen assets.