{
  "id": 17198337,
  "title": "$6 Billion Binance Hack Bears Hallmarks of North Korea’s TraderTraitor",
  "url": "https://urgent.news/2026/10/30/6-billion-binance-hack-bears-hallmarks-of-north-koreas-tradertraitor",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-10-30T08:16:26.000Z",
  "source": {
    "name": "SecurityWeek",
    "slug": "securityweek",
    "url": "https://www.securityweek.com/6-billion-binance-hack-bears-hallmarks-of-north-koreas-tradertraitor/"
  },
  "original_language": "en",
  "account": null,
  "summary": "Binance reported that approximately $6.3 billion in assets were stolen during a major hack. Techmeme reports the theft involved roughly $6.36 billion drained from Binance wallets across 10 blockchains in about 20 minutes. Cointelegraph notes that around $3 billion in stolen funds have been frozen by industry partners.\n\nTRM Labs has attributed the attack to the North Korea-based hacking group TraderTraitor with \"high confidence,\" citing robust on and off-chain intelligence. Chainalysis CEO Jonathan Levin also stated the hack was likely carried out by TraderTraitor, placing the theft at $6.4 billion. Cointelegraph reports that Blockaid co-founder and CEO Ido Ben-Natan noted the attack resembled North Korean work due to sophisticated onchain preparations, including a customer sweeper contract and multiple authorizations.\n\nOnchain investigator ZachXBT observed that stolen funds from the Binance attack and an earlier Bitget exploit were commingled in the same address via THORChain, suggesting the same actor is behind both incidents. SecurityWeek reports that Binance is probing a potentially compromised engineer laptop as blockchain analysts link the record theft to North Korean hackers.",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}