North Korea’s TraderTraitor Linked to $6.3B Binance Hack
Ecosystem
English | News | Latest News
Bitcoin | Ethereum | Altcoins | Blockchain | Regulation | Markets | Features | Magazine | Reviews | Research | Opinion | Podcasts | Newsletters | Commissioned | Articles | Press Releases | Special Projects
About | About Cointelegraph | History of Cointelegraph | Editorial Policy | Ads Disclosure | Financial Risk Disclaimer
- DOGE: $0.07544 (1.44%)
- TRX: $0.3250 (3.50%)
- LINK: $11.44 (2.91%)
- ZEC: $1,265.20 (0.72%)
- ADA: $0.1933 (0.65%)
- XRP: $1.24 (1.71%)
- ETH: $2,242.44 (0.40%)
- BTC: $77,218.21 (1.78%)
- XMR: $596.30 (1.01%)
- BNB: $702.93 (1.86%)
- XLM: $0.1691 (1.12%)
- SOL: $95.83 (2.41%)
- HYPE: $88.06 (5.86%)
Written by Felix Ng (staff editor) Edited by Yohan Yun (staff editor)
North Korea’s TraderTraitor group has been linked to the $6.3 billion Binance hack by cybersecurity researchers from TRM Labs and Chainalysis, along with onchain investigator ZachXBT.
TRM Labs expressed high confidence in the attribution, citing onchain and offchain intelligence. ZachXBT noted that funds from the Binance and Bitget hacks converged at the same address, suggesting the same actor was responsible for both incidents. Chainalysis CEO Jonathan Levin also pointed to TraderTraitor, stating that the group stole slightly above the estimated $6.3 billion impact.
This attribution follows earlier indications from Blockaid CEO Ido Ben-Natan, who linked the attack’s sophistication to North Korean activity. US authorities have previously connected TraderTraitor to significant crypto heists, including the Bybit and DMM Bitcoin hacks. The FBI attributes their targeting method to social engineering, as seen in the DMM case.
Related:
- Bitget CEO suspects North Korea behind $352M hack, citing IP clues
Subscribe to daily byte-sized crypto news from Cointelegraph
Cointelegraph adheres to independent, transparent journalism. For more on this news article, see our Editorial Policy. Readers are encouraged to verify information independently.