Signal
FBI attributes Binance hack to North Korea-linked TraderTraitor group
Evidence first: scan the strongest sources, then decide whether to go deeper.
Published 2026-10-31 07:59 UTCUpdated 2026-11-01 01:10 UTC
rsstelegram
cryptoexchangesecurityhacksdefion_chain_data
Trend in the last 24h
Current brief openSource links open
This current signal is open on the public brief with summary, metadata, source links, and full evidence. Pro adds compare-over-time, alerts, exports, and workflow.
No card needed for the free brief.
Evidence trail (top sources)
top sources (4 domains)domains are deduped. counts indicate coverage, not truth.4 top sources shown
Overview
Reports have converged on the attribution and follow-up response to the Binance hack: the FBI linked the incident to North Korea’s TraderTraitor group and asked the DeFi community to block associated BTC, ETH, and SOL addresses. Chainalysis reportedly expects the number of implicated addresses to grow, while separate reporting places the incident within a broader pattern of North Korea-linked crypto losses.
Entities
BinanceChainalysisTraderTraitorBTCETHSOL
Why now
- The FBI’s attribution and address-blocking request add a new response phase to the hack.
- Chainalysis expects the number of associated addresses to continue growing.
- Multiple outlets are reporting the incident alongside wider North Korea-linked crypto hack losses.
Why it matters
- The reported scale of the hack elevates the need for address monitoring and coordination around affected assets.
- The FBI request directly concerns DeFi participants and screening of BTC, ETH, and SOL addresses.
- The incident is part of broader reporting on North Korea-linked crypto hack losses.
Evidence assessment
Recurring claims
- Attackers tied to North Korea drained roughly $6.4 billion from Binance.
- The FBI attributed the hack to North Korea’s TraderTraitor group and requested that the DeFi community block listed addresses.
- Chainalysis said the attackers have used thousands of addresses and expects that number to continue growing.
How sources frame it
- CoinDeskGlobal: neutral
- Decrypt: neutral
- Crypto.News: neutral
Multiple reports cover the same Binance hack, with new attribution and address-blocking requests forming an evolving security story.
All evidence
All evidence
FBI attribution and address-blocking request
coindesk.com · coindesk.com · 2026-11-01 01:10 UTC
Incident overview
decrypt.co · decrypt.co · 2026-10-31 15:01 UTC
North Korea-linked hack losses
crypto.news · crypto.news · 2026-10-31 07:59 UTC
🇰🇵 HUGE: The FBI has attributed the $6 billion-plus Binance hack to North Korea’s TraderTraitor group.
Ct (via cointelegraph) · ct.com · 2026-10-31 21:35 UTC
Show filters & breakdown
Evidence items loaded: 0Publishers: 4Origin domains: 4Duplicates: -
Showing 4 / 5