Circle · South Korea · North Korea · Ethereum · Bitcoin Magazine
Blockchain Firms Link North Korea to $6.3 Billion Binance Hack
Compiled by KHAO Editorial — aggregated from 2 sources. See llms.txt for citation guidance.
◎ Multiple-sources
Chainalysis and TRM Labs have linked yesterday’s $6.3 billion Binance hack to North Korea’s TraderTraitor group.
Key facts
- Total market liquidations reached $1.5 billion, with bitcoin accounting for $468 million and ether for $358 million
- Binance said Thursday that the security incident affected about $6.3 billion in assets, surpassing the $1.5 billion Bybit hack of 2025, which was attributed to North Korean hackers
- Chainalysis said the attacker swapped $325 million in stablecoins into $285 million in ETH over roughly 20 minutes, then sent the remaining $175 million to stopover wallets
- Bitcoin dropped toward $76,000 on Friday morning before trading near $77,400
Summary
Blockchain analysis firms Chainalysis and TRM Labs have linked the $6.3 billion Binance hack yesterday to TraderTraitor, a unit associated with North Korea. Chainalysis puts the total at $6.4 billion in its own assessment. The firm said the attacker used an operational wallet funded through Tornado Cash to submit signed authorizations that allowed a Binance hot wallet to run attacker-deployed code. The exchange said it has found no evidence of a wallet private key leak.