Crypto investigators TRM Labs, Chainalysis and onchain investigator ZachXBT have linked the $6.3 billion Binance hack to North Korea’s TraderTraitor group. TRM Labs said it attributed the attack with “high confidence,” while ZachXBT said funds stolen from Binance and the earlier Bitget exploit were commingled at the same address after moving through THORChain, indicating the same actor is likely behind both. Chainalysis co-founder and CEO Jonathan Levin put the amount stolen at $6.4 billion, slightly above Binance’s estimated $6.3 billion impact, and said the group was likely responsible. The article also notes US authorities have tied TraderTraitor to major thefts, including the February 2025 Bybit hack and the more than $300 million DMM Bitcoin theft in May 2024, and that the FBI says the group targets employees through social engineering.
Summary written by Upside AI from the original article. Read the source for full details.
Read the original on Cointelegraph ↗
Keywords
cryptocybersecurityNorth KoreaBinance
Open a keyword to see other news on the same topic.
Related tickers and likely impact
BNB/USDT
▼ Likely negativeBNB
Relevance: high
| Market | Crypto |
|---|---|
| Exchange | Binance |
| Sector | Exchange tokens |
| Market cap | $97.5B |
| Close on 10/29/2026 | 698.46 |
| Change that session | -8.08% |
BTC/USDT
▼ Likely negativeBitcoin
Relevance: low
| Market | Crypto |
|---|---|
| Exchange | Binance |
| Sector | Layer 1 |
| Market cap | $1.6T |
| Close on 10/29/2026 | 77,991.89 |
| Change that session | -4.12% |
Impact is scored by AI from the headline and may be wrong. It is not investment advice.
Related news
- Crypto's longtime foe, North Korea's Lazarus Group, likely behind Binance hack: blockchain sleuths
- Drift exploiter sends $109M in Ether to Tornado Cash in 2 days
Wallets linked to the Drift exploiter sent another 18,800 ETH (about $46 million) to Tornado Cash on Wednesday, bringing the two-day total to 44,510 ETH, or $109 million, according to Onchain Lens. These transfers account for nearly 37% of the $295 million stolen from the Solana-based DEX in April, making the funds harder to trace. The labelled wallets still hold 56,569 ETH, worth about $138 million, per Arkham data. DefiLlama ranks the attack as this year's third-largest crypto hack, and security consultant Mandiant attributed it to a North Korean threat group.
- Binance hacker splits $1.4 billion of bitcoin into 19 wallets that no one can freeze
- Elon Musk’s “surprising” reaction to the biggest crypto heist in history
Binance estimates the total value of affected assets at about USD 6.3 billion, higher than the initial analyst estimates of USD 5.6–5.7 billion. Elon Musk posted “Everyday is Zeroday” on X, a reaction described as unsurprised. Binance said the initial cause may be a compromised laptop of a DevOps engineer, which allowed attackers to access an internal service container and send unauthorized withdrawals; some blockchain analysts reported the use of EIP-7702 delegation to take control of Binance’s hot wallet 14. About USD 3 billion has been frozen, up from USD 2.54 billion, mainly thanks to Tether (over 1.567 billion USDT), Circle (over 800 million USDC) and Ripple (about 200 million USD). Binance stresses that USD 6.3 billion is not the final loss and pledges to fully compensate users using the SAFU fund and company capital.
- $6 billion Binance hack sends bitcoin, ether tumbling; Standard Chartered expects more pain
- More than $5.5 billion in crypto stolen as Binance faces biggest hack in history
Binance may have lost more than $6 billion in crypto in an attack that analysts describe as the largest in the industry's history. Chainalysis estimates the losses at $5.9 billion and TRM Labs puts them above $6 billion, while some security experts suggest the actual figure could be between $2 and $5.5 billion; the exchange has not disclosed the cause or total losses. Binance halted deposits and withdrawals and has frozen about $3 billion in related assets, with Tether, Circle and Ripple also freezing funds. Founder Changpeng Zhao said the incident appears to be a cyberattack and that user assets are safe, while co-founder Yi He said the company will cover all losses. Bitcoin fell about 2% to $77,646, BNB dropped more than 8% over 24 hours, and Coinbase shares fell 4.8%.
Related markets
Latest news
- A2Gold signs agreement to sell Bolo Gold project in Nevada
A2Gold has agreed to sell 100% of its Bolo Gold project in Nye County, Nevada, US, to Super Gold Mining. The project comprises 187 unpatented lode mining claims and the Uncle Sam claim. At closing, Super Gold will issue 3,750,000 common shares at a deemed value of C$0.40 each (C$1.5m, or $1.07m), replace about $198,500 in reclamation bonding and reimburse this year's claim maintenance fees. Further payments of up to C$2.8m ($2m) depend on future work: up to C$2.4m in cumulative resource milestone payments and C$400,000 if a qualifying Preliminary Economic Assessment (PEA) incorporates at least 200,000 gold-equivalent ounces. Super Gold must complete an initial NI 43-101 mineral resource estimate within two years and use commercially reasonable efforts to complete a Going Public Transaction within 12 months, failing which A2Gold is entitled to C$200,000 in cash. Closing is expected within the next few weeks, subject to conditions including replacement bonding and approval of the Plan of Operations transfer.
- Discussion on the draft amended Law on Real Estate Business: Not letting developers deliberately commit violations and then 'just pay a fine and it's over'
On 30 October, the National Assembly debated the draft amended Law on Real Estate Business in plenary session. Deputy Vũ Văn Tiến (Hai Phong delegation) cited more than 3,900 apartments in Muong Thanh Group projects in Hanoi that are included in a planned plan to address violations of planning and construction order. He urged tighter control from the point of sale, cross-checking apartment lists against approved documents, publishing lists of eligible units, clarifying each agency's responsibility, and requiring developers to bear full responsibility and recover unlawful gains rather than simply paying fines. On contract transfers, delegates said deposits for future housing should be capped at 5% and collected only once the property is eligible for business; Tô Ái Vang (Can Tho delegation) proposed placing the deposit in a blocked account, while Dương Khắc Mai (Lam Dong delegation) warned of collections under names such as 'slot reservation' before they are permitted.
- Stocktwits Passport Portfolio: SPY, DIA Edge Higher In October, Beating QQQ And Asian Stocks Amid Tech Volatility
Global stock markets are set for a mixed October close, with the Dow Jones and S&P 500 poised to finish higher while the Nasdaq and Asian markets lag amid tech volatility. DIA is up nearly 3% for the month and SPY is set to close about 1% higher, whereas QQQ is poised to end lower as investors question the sustainability of returns on AI infrastructure spending. South Korea's EWY is down more than 11% as of Oct. 29 as a chip-stock selloff weighs, while Samsung Electronics and SK Hynix have fallen about 17% and 20%, respectively, over the past month. The Federal Reserve held rates at 3.75%-4.00%, the Bank of Korea paused hikes after raising rates in July and August, and the Bank of Japan held its benchmark rate at 1.25% while raising its inflation forecast. Amazon reported capital expenditure of $77.3 billion in its latest quarter, and Microsoft lowered its full-year spending forecast to $170 billion from $175 billion.
- Palantir Technologies vs. Figma: Comparing Revenue Growth Trends
This comparison looks at revenue over the last eight quarters for Figma (FIG) and Palantir Technologies (PLTR), using data as of Oct. 22, 2026. Figma, a browser-based design platform, recently launched several AI design features and disclosed that its CEO voluntarily forfeited $46 million in stock awards. Its second-quarter sales of $370.1 million rose 48% year over year, partly due to AI credit monetization, with Q2 being the first full quarter of that revenue stream. Palantir's revenue is considerably larger and has increased every quarter, with the company forecasting third-quarter revenue of around $2.2 billion; it has also secured a U.S. Army ground station production contract and a collaboration with NVIDIA. Figma is scheduled to report third-quarter earnings on Nov. 4.
- Phu Quoc Special Zone to Be Submitted to the Government for Recognition as a Special Economic Zone
The An Giang People's Council approved a proposal asking the Government to recognize the Phu Quoc special zone as a Special Economic Zone, aiming to develop it into an international tourism and marine services hub with stronger decentralization. The plan proposes maximum delegation of powers to the special zone's authorities and transfer of Phu Quoc National Park to its management, with requirements to secure resources, data and power-control mechanisms. For 2026–2030, Phu Quoc targets total social investment of 195,000 billion VND and about 15 million visitors by 2030. The island covers over 575 km² and has more than 179,000 residents, and it welcomed over 8.2 million visitors in 2025, including over 1.8 million international arrivals. After approval, the provincial People's Committee will complete the dossier for Ministry of Finance appraisal before the Government reviews it.
- Iran claims four tankers struck mines in Hormuz as strike fears grow after U.S. midterms
Iran said four tankers struck mines in the Strait of Hormuz, while Yemen's Houthis claimed missile strikes on Saudi Arabia, adding pressure on two fronts. The IRGC said three tankers caught fire after striking mines on an "unauthorized southern route" near the Omani coast, and Iran's army said a fourth burned east of the strait. The UK Maritime Trade Operations agency reported a small boat attaching two explosive devices to a tanker about 25 nautical miles northeast of Khasab, Oman, causing an engine-room fire that disabled the vessel; the crew was safe. Meanwhile, Vice President JD Vance is seeking to reopen talks with Iran, and the U.S. is reportedly weighing renewed military action after the Nov. 3 midterm elections, raising fears that fighting could resume around the vote. Traffic through the strait has fallen to single-digit daily transits since the war began in late February.
Get the briefing on Telegram or Zalo
Join the Upside Telegram channel or Zalo group for the Vietnam stocks and gold briefing at 8:00 and 19:00 (Vietnam time) on trading days, plus a weekly wrap on Saturday morning.