Beijing Chainan Chainsmap monitoring system found that Upbit's stolen ETH money laundering process has been relatively quiet for nearly two weeks, and continues to be active this week. Previously, on December 25, 2019, Beijing time, the active money laundering core address beginning with 84f4 was suspended, and other stolen ETH addresses were relatively quiet. Starting around this Sunday, several batches of ETH concentrated on the fourth layer of the stolen ETH money laundering path of Upbit began to frequently transfer again, involving more than 25,000 ETH. From the observations in recent days, its strategy no longer focuses on one address as the money laundering pool address, but after three or four transfers, it pools at the addresses of several money laundering centers, and then transfers the money in units of several to dozens. To several exchanges. According to data analyst SXWK, Upbit's stolen ETH money laundering strategy has been adjusted. This strategy has not been implemented such as switching to a stablecoin on a decentralized exchange. Instead, it emphasizes the relative decentralization of centralized processing (centralized More address processing), efficiency (usually a batch of ETH pooled within two days), overall, money laundering is still processing each batch of ETH in the fourth level one by one.