North Korea · Ethereum · The Block
Chainalysis published the full text of the notice evening
Compiled by KHAO Editorial — aggregated from 2 sources. See llms.txt for citation guidance.
✓ KHAO Verified
"Based on the evidence available to date, The Block has found no indication that these incidents resulted in the unauthorized access of investigation content (such as graphs, notes, or cases), transaction or query results, passwords in clear text, MFA secrets, or user session tokens," Chainalysis wrote.
Key facts
- On Ethereum, the attacker used EIP-7702 to turn a Binance hot wallet into a sweeper, The Block previously reported
- Chainalysis, Elliptic and TRM have each attributed the roughly $6.3 billion Binance hack to North Korean hacking groups, which, according to Binance, managed to compromise an engineer's laptop
- The sweeper contract was only around 130 lines, Immunefi Vice President Simone Imbrescia said shared with The Block
- Chainalysis, which puts the theft at $6.4 billion, has continued to track the stolen funds
Summary
Blockchain analytics firm Chainalysis said an unidentified hacker using "offensive agentic techniques" broke into its systems and internal tools this month and accessed some "non-sensitive" customer data, according to a notice sent to affected customers. Chainalysis did not say when it detected the intrusion, which was first flagged by International Cyber Digest, how many customers were affected, which specific vulnerabilities the attacker exploited, or how AI agents played a role in the breach. Chainalysis said it has contracted third-party cybersecurity experts and is using large language models to support a broad security review of its platform. Chainalysis said the incident is "not related to the recent crypto theft at Binance.