Cointime

Cointime

Download App
iOS & Android
Home / Point

TRM: High Confidence That $6.36 Billion Binance Theft Was Executed by North Korean Hacker Group TraderTraitor

On October 30, according to an analysis article by on-chain analytics firm TRM, attackers transferred approximately $6.36 billion from Binance wallets across ten blockchains in about 20 minutes. These blockchains include Ethereum, Bitcoin, Tron, XRP Ledger, Solana, Arbitrum, Avalanche, Optimism, Base, and Polygon. This incident marks the largest recorded cryptocurrency theft, approximately four times larger than the Bybit incident in February 2025. TRM attributed this attack to the North Korean elite hacker group TraderTraitor, making this judgment with high confidence based on both on-chain and off-chain intelligence. On Ethereum, the attackers exploited EIP-7702 delegation to turn one of Binance's hot wallets into a sweep contract under their control, having pre-prepared 50 pre-signed authorizations. During the same time window, Binance's wallets on the other nine chains transferred funds to the attackers through regular signed transactions. TRM assesses that Binance's hot wallet signature infrastructure was compromised. After the theft, Tether, Circle, Ripple, and World Liberty Financial have frozen approximately $2.67 billion in stablecoins, while the Arbitrum security council has frozen about $30 million in ETH and ARB, totaling around $2.7 billion. The attackers currently still control over 420,000 ETH and 18,270 BTC, valued at approximately $2.4 billion.

Comments

All Comments

Recommended for you

  • Binance Confirms Total Verified Freezes Amounting to $2.54 Billion

    On October 30, Binance officially announced on X: "We have noticed that various different figures regarding the frozen amounts are currently circulating publicly, including claims of $1.8 billion. To clarify the facts, the currently verified total amount frozen is $2.54 billion. As our team works closely with law enforcement, issuers, blockchain intelligence companies, and industry partners to trace and freeze more assets, this number may continue to increase. We will only share confirmed figures and will provide further updates as more verified information becomes available."

  • Binance Marked Wallet Outflows Exceed $5.6 Billion, At Least $2.316 Billion Frozen

    On October 30, on-chain monitoring revealed that the total outflow of assets from Binance's marked wallets is approximately $5.643 billion. The detailed breakdown includes $3.528 billion in Ethereum, $1.449 billion in Bitcoin, $628 million in Tron, and a total of $38 million across Arbitrum, Optimism, and Base networks. This statistic excludes change outputs and avoids double counting for subsequent transfers and exchanges. Tether and USDC issuer Circle have frozen at least $2.316 billion in stablecoins, which includes approximately $1.493 billion in USDT and $823 million in USDC.

  • CZ: Approximately $1.794 Billion in Stablecoins Frozen, Binance User Funds Secure

    On October 30, CZ stated that user funds are secure, indicating that this appears to be a targeted hacker attack on Binance. CZ thanked Tether and Circle for swiftly freezing the relevant funds, which amount to approximately $971 million and $823 million, respectively. CZ mentioned that he no longer manages Binance.com, but as a shareholder, he expects all user funds to be fully covered. Previously, Binance's official statement indicated that they are investigating potential security issues, and it has not yet been confirmed whether user funds have been affected.

  • PhotonPay Completes $40 Million Series C Financing

    On October 29, Hong Kong payment operating system PhotonPay completed a $40 million Series C financing round, led by Blockchain Capital, with participation from SBI Group, IDG Capital, GL Ventures, and Lightspeed Faction. The funds will be used to expand multi-asset wallets, global issuance, and local clearing infrastructure, as well as to develop financial tools for AI agents.

  • Mawell Technology Drops Over 12%, Lumentum Rises Over 2%

    On October 29, optical communication concept stocks generally fell, with Mawell Technology dropping over 12%, AXT down over 7%, Ciena nearly 4%, Astera Labs and Applied Optoelectronics down nearly 3%, and Broadcom and Tower Semiconductor falling over 2%. In news, Mawell Technology is in deep negotiations to acquire optical communication leader Lumentum, with both parties potentially announcing a deal as early as next week. If the two companies merge, Mawell is expected to further integrate high-speed signal processing chips with core optical devices, strengthening its layout in AI data center optical interconnect technology. Market analysis indicates that this heavyweight merger could change the industry landscape and drive a new round of reshuffling in the optical communication supply chain.

  • Iran Imports $2 Billion in Military Equipment

    On October 29, Al Jazeera reported, citing Reuters, that Iran has established a vast global network of institutions to import military equipment worth at least $2 billion while circumventing U.S. Navy blockades and Western sanctions. It is reported that these over 5,000 institutions form a powerful financial and military operational system. Some of these institutions are linked to the Iranian Revolutionary Guard, while others belong to commercial conglomerates controlled by Iran's elite, known as 'bonyads' (various foundations/business groups). Miad Maleki, a former senior official at the U.S. Treasury who was involved in designing sanctions against Iran, stated, 'This is essentially Iran's military lifeline in the current conflict—and has been for many years prior.'

  • ECB Holds Rates Steady, December Rate Hike Expectations Rise

    On October 29, the European Central Bank (ECB) kept its interest rates unchanged at 2.5%, in line with market expectations. Meanwhile, the news of President Lagarde's early departure has intensified market concerns over energy costs and the situation in France. In terms of interest rate policy, the ECB has chosen to adopt a wait-and-see approach. Since the impact of the Iran war on the energy market, the ECB has raised rates twice. Officials are worried that inflation could rise to twice the 2% target, but so far, there are no signs of rising oil and gas prices spreading to other sectors. At the same time, the previously unexpectedly resilient growth momentum of the European economy is weakening. The market widely expects that policymakers will raise rates again in December. At that time, the ECB will release its latest economic forecasts to assess the severity of inflation pressures. The situation in France has further tightened the financial environment, which is suppressing demand. Analysts expect that the year-end rate hike will be the last of this round of tightening by the ECB. However, investors are betting on two more rate hikes by 2027.

  • Alphabet (GOOG.O) Shares Drop 13%, Market Value Set to Decrease by Nearly $490 Billion

    Alphabet (GOOG.O) shares have fallen by 13%, resulting in a market value decrease of nearly $490 billion.

  • French 10-Year Government Bond Yield Drops 9.5 Basis Points to 4.845%

    The yield on France's 10-year government bonds fell by 9.5 basis points during the day to 4.845%, down from 4.880%.

  • HYPE Surpasses $90 with Over 10% Daily Increase

    Market data shows that HYPE has surpassed $90, with a daily increase of over 10%. The market is experiencing significant volatility, so please ensure proper risk management. Previously reported, the Intercontinental Exchange (ICE) will operate the Trade.xyz regulated perpetual contract market in the United States.

Daily Must-Read

Popular Activities

RaveDAO at Terra Solis by Tomorrowland: A Female-Led Techno Night Where Web3 Culture Converges

RaveDAO at Terra Solis by Tomorrowland: A Female-Led Techno Night Where Web3 Culture Converges

April 30 - April 30
Dubai

Popular Tags

Cointime
News
Contents
RSS
Company