# Blockchain investigators link Binance theft to North Korea's TraderTraitor

_Published Friday, October 30, 2026 at 2:19 PM EDT · Security · Latest · Tier 2 — Notable_

![Blockchain investigators link Binance theft to North Korea's TraderTraitor — Primary](https://s.yimg.com/lo/mysterio/api/901ec4c4172d1150f96e43f2acc79410b62ea3eb079cd4546181074c8d385f0a/lightyear_networkapi/resizefill_w1200%3Bquality_80%3Bformat_jpg/https%3A%2F%2Fmedia.zenfs.com%2Fen%2Fcybersecurity_dive_871%2F3f9ab09dd79ab04775ba2f6e27b10afa)

Cryptocurrency analysis firms TRM Labs and Chainalysis attributed the roughly $6.3 billion Binance theft to the North Korean hacking team TraderTraitor, Cybersecurity Dive reported. The FBI and U.S. Secret Service also confirmed their involvement in the investigation.

TRM Labs said attackers prepared at least 36 hours before the theft and stole most of the money in roughly 20 minutes. It identified advance signatures, wallet staging and funding patterns resembling earlier North Korea-linked attacks. Binance said several systems, including an engineer's laptop, were compromised before attackers accessed a privileged withdrawal system. The attribution comes from the analysis firms; the federal agencies confirmed investigative involvement.

## Sources

- [Yahoo](https://www.yahoo.com/news/world/articles/north-korea-linked-group-steals-141934686.html)

---
Canonical: https://techandbusiness.org/newswire/GiAHtCmKE79ffxX_MUfNU_
Published: 2026-10-30T18:19:13.538Z
Story chronology: 2026-10-30T14:19:34.000Z
Retrieved: 2026-10-30T21:07:32.623Z
Publisher: Tech & Business (techandbusiness.org)