Binance Hack: TRM and Chainalysis Tie $6.3B Theft to North…
By Abdelaziz Fathi

AI summary of the source article
Blockchain analytics firms TRM Labs and Chainalysis have linked the $6.3 billion Binance hack to North Korea's TraderTraitor group. Binance attributed the unauthorized withdrawals to a compromised DevOps engineer's laptop and has pledged to cover all losses.
Why it matters
Attribution "does shape the recovery odds: North Korean groups tend to move stolen funds quickly through swaps, bridges and OTC brokers, and funds that escape the first freezes are rarely recovered."
Key facts
- TRM Labs and Chainalysis tied the estimated $6.3 billion Binance theft to North Korea-backed hacking unit TraderTraitor.
- Binance reported that a compromised DevOps engineer's laptop enabled the attacker to access systems and submit unauthorized withdrawals.
- Approximately $2.7 billion of the stolen funds have been frozen, while around $2.4 billion in ETH and BTC remains under the attacker's control.
Source excerpt · FinanceFeeds
Blockchain analytics firms TRM Labs and Chainalysis have tied the $6.3 billion Binance hack to North Korea, naming TraderTraitor, a state-backed hacking unit linked to the Lazarus Group, as the likely attacker. Binance itself has not named a culprit, and no government agency has yet made a formal attribution. TRM Labs said in a report published early on 30 October that it attributes the theft to T…