Binance Hack Investigation Points to North Korean TraderTraitor Group
Blockchain analysts suspect North Korea's TraderTraitor group orchestrated the record $6.3 billion Binance hack.
Blockchain analysts suspect North Korea's TraderTraitor group orchestrated the record $6.3 billion Binance hack. This is an original Token Times brief synthesising 4 outlets (Cointribune, Bitcoin.com, Decrypt, and others), with their figures cross-checked, plus live market data, as of Fri, 30 Oct 2026 14:15:01 UTC.
This massive hack, if confirmed, would be the largest cryptocurrency theft ever, highlighting vulnerabilities in exchange security and the growing sophistication of state-sponsored cybercrime.
- Binance suffered a $6.3 billion hack on October 29, potentially the largest crypto theft on record.
- Blockchain analysts attribute the attack to North Korea's TraderTraitor group with high confidence.
- Stolen funds from Binance and Bitget were traced to the same address, suggesting a connection.
- Tron's TRX price surged as hackers bought large amounts to avoid network blockage.
Multiple outlets, including Cointribune, Bitcoin.com, and Bitcoin Sistemi, report that blockchain analysts suspect North Korea's TraderTraitor group orchestrated the Binance hack, with TRM Labs attributing the attack with high confidence. Estimates of the stolen amount converge at $6.3 billion across Cointribune and Bitcoin.com, while Bitcoin Sistemi suggests losses may exceed $2 billion. The connection between stolen funds from Binance and Bitget was highlighted by ZachXBT, as reported by Cointribune.
The cryptocurrency exchange Binance suffered a massive hack on October 29, with blockchain analysts now pointing to North Korea's TraderTraitor group as the likely perpetrator. TRM Labs, a blockchain analytics firm, has attributed the attack to this group with a high level of confidence.
The scale of the hack is staggering, with estimates of the stolen amount reaching $6.3 billion, as reported by Cointribune and 
Bitcoin.com. This would make it the largest cryptocurrency theft ever recorded. Bitcoin Sistemi suggests the losses may exceed $2 billion, indicating the significant impact of the breach.
Investigators have found that stolen funds from both Binance and Bitget ended up at the same address, as reported by Cointribune citing crypto investigator ZachXBT. This connection suggests a coordinated attack across multiple platforms.
During the hack, attackers purchased a large amount of TRX on the Tron network to avoid potential network congestion, causing the coin's price to surge, according to Bitcoin Sistemi. This move highlights the hackers' strategic approach to bypassing network security measures.
The broader market context shows a decline in the total crypto market cap, which stands at $2.67 trillion, with Bitcoin down 3.50% in the last 24 hours. The Fear & Greed index is at 30, indicating a state of fear in the market. The Tron DeFi TVL is $5.58 billion, as reported by DeFiLlama.
1 key figure independently matched across 3 outlets reporting this story.
Token Times extracts the figures each outlet reports and flags the ones that agree. Numbers cited by only one outlet are attributed in the brief, not shown as corroborated.
Figures and sectors in this story, checked live against on-chain aggregators · October 30, 2026.
Token Times reads these figures directly from on-chain aggregators (DeFiLlama, mempool.space) at build time — independent of what any outlet reported. Sector totals aggregate every protocol DeFiLlama tracks in that category. Values are live and will change.
Binance Hack Investigation Points to North Korean TraderTrai — questions & answers
What is the estimated amount stolen in the Binance hack?
Estimates of the stolen amount range from $2 billion to $6.3 billion, with $6.3 billion being the most widely cited figure.
Who is suspected of carrying out the Binance hack?
Blockchain analysts suspect North Korea's TraderTraitor group, a sub-unit of the Lazarus/DPRK ecosystem, orchestrated the hack.
How did the hackers use Tron during the attack?
Hackers bought a large amount of TRX on the Tron network to avoid network congestion, causing TRX's price to surge.
Which outlets reported this story?
This is an original Token Times brief that synthesises reporting from Cointribune, Bitcoin.com, Decrypt, Crypto Economy, with the key figures cross-checked for agreement across them. It is not a copy of any one article — follow the source links above for the original reporting.
Original summary — not financial advice. This is an original Token Times brief that summarises a development reported elsewhere and adds live market data for context; it is not the original article and reproduces no part of it. Follow the source link above for full details. Crypto is volatile and high-risk — always do your own research.