North Korea’s TraderTraitor linked to $6.3B Binance hack

Cybersecurity researchers from TRM Labs and Chainalysis, along with onchain investigator ZachXBT, have linked the $6.3 billion Binance hack to North Korea’s TraderTraitor group.

TRM Labs attributed the attack to TraderTraitor with “high confidence,” citing onchain and offchain intelligence.

Onchain investigator ZachXBT said funds stolen from Binance and the earlier Bitget exploit were commingled at the same address after moving through THORChain.

“This indicates the same actor is likely behind both incidents,” he said, adding that the Bitget attack had been attributed to TraderTraitor.

Chainalysis co-founder and CEO Jonathan Levin also pointed to TraderTraitor, saying the group stole $6.4 billion, slightly above Binance’s estimated $6.3 billion impact.