TRM Labs and Chainalysis link $6.3bn Binance hack to North Korea's TraderTraitor
Cybersecurity researchers and onchain investigator ZachXBT attribute the $6.3bn Binance hack to North Korea's TraderTraitor group, with stolen funds from Binance and Bitget converging at one address.
Why it matters: The attribution ties one of crypto's largest reported thefts to a state-linked group that US authorities have already connected to major exchange and wallet breaches.
Key points
- TRM Labs says it has "high confidence" that TraderTraitor carried out the Binance attack, citing onchain and offchain intelligence.
- Chainalysis CEO Jonathan Levin puts the Binance loss at $6.4bn and also points to TraderTraitor.
The $6.3bn Binance hack has been linked to North Korea's TraderTraitor group by researchers at TRM Labs and Chainalysis, alongside onchain investigator ZachXBT, Cointelegraph reports. TRM Labs said it holds "high confidence" in the attribution, based on onchain and offchain intelligence.
ZachXBT said funds taken in the Binance hack and the earlier Bitget exploit were mixed at the same address after passing through THORChain. That suggests the same actor was probably behind both incidents, he said, noting that the Bitget attack had already been attributed to TraderTraitor. Chainalysis co-founder and CEO Jonathan Levin also named the group, putting the Binance figure at $6.4bn, slightly above the $6.3bn estimate.
Live updates on NewsFeeds:AltcoinsDesk editor: Keshav Aggarwal (accountable for this page; this summary was not edited by hand)
How this was produced: an AI model wrote this summary of Cointelegraph’s report, which we credit and link above. Read our Editorial and AI policy. Spotted a mistake? See Corrections.
Not investment advice. Read the risk disclaimer.