/
Navigation
Chronicles
Browse all articles
Explore
Semantic exploration
Research
Entity momentum
Nexus
Correlations & relationships
Story Arc
Topic evolution
Drift Map
Semantic trajectory animation
Posts
Analysis & commentary
Pulse API
Tech news intelligence API
Browse
Entities
Companies, people, products, technologies
Domains
Browse by publication source
Handles
Browse by social media handle
Detection
Concept Search
Semantic similarity search
High Impact Stories
Top coverage by position
Sentiment Analysis
Positive/negative coverage
Anomaly Detection
Unusual coverage patterns
Analysis
Rivalry Report
Compare two entities head-to-head
Semantic Pivots
Narrative discontinuities
Crisis Response
Event recovery patterns
Connected
Search: /
Command: ⌘K
Embeddings: large
TEXXR

Chronicles

The story behind the story

days · browse · Enter similar · o open

A look at Sinbad.io, a Bitcoin mixer launched in October 2022 that appears to have become the preferred outlet for North Korean hackers to launder stolen crypto

the question doesn't interest me. What we do know is they are evading our sanctions and facilitating illicit financing for enemies of the United States. That can't stand. https://www.wired.com/... Andy Greenberg / @a_greenberg : https://sinbad.io/, a newly launched Bitcoin mixer, has quickly become North Korean hackers' preferred outlet for laundering tens of millions in stolen crypto. I interviewed Sinbad's creator, who insists he's running a legitimate privacy service. https://www.wired.com/...

Wired Andy Greenberg

Context & Ripple Effects

Andy Greenberg's profile catches Sinbad.io at an inflection point: launched just months earlier, the mixer has already become the preferred outlet for North Korean hackers moving tens of millions in stolen crypto, while its creator insists he is running a legitimate privacy service. That denial is the whole story — a service whose business depends on not asking where funds come from.

The piece lands mid-arc in Washington's campaign against Pyongyang's crypto laundering. Within two years the trajectory runs from profile to US sanctions and a three-country seizure of the service, then to a DOJ indictment of its alleged Russian operators.

First-order effects

  • North Korean hackers gain a low-friction channel for cashing out stolen bitcoin at scale, and US officials treat Sinbad's operation itself as active sanctions evasion rather than neutral infrastructure.

Second-order effects

  • Heightened scrutiny of mixers pushes some laundered flows toward alternatives — researchers flag North Korean hackers renting cloud compute to mine fresh coins instead of touching more-watched mixing services (renting cloud compute to mine fresh coins).

Third-order effects

  • The pattern that ends in Sinbad's sanctioning, seizure, and criminal indictment points to mixer operators being treated as prosecutable principals, forcing illicit finance toward ever-less-scrutinized techniques like mining-based laundering.

The trend: Crypto mixers are graduating from privacy tools to named national-security targets, with each crackdown pushing state-linked launderers to new obfuscation methods.