do we really think that an entire nation state is unable to set up the apparatus to cheat a few measly KYC checks?
coin to coin exchanges do not require KYC, so hypothetically if they can beat KYC (which surely they can) they wouldn't even need to be depositing the actual coins they stole.
coin to coin exchanges do not require KYC, so hypothetically if they can beat KYC (which surely they can) they wouldn't even need to be depositing the actual coins they stole.