Chainalysis
Chainalysis linked the $6.3 B Binance hack to TraderTraitor, a North Korea‑associated unit, in cooperation with TRM Labs. It observed Binance’s hot‑wallet activity during the breach, including the movement of assets across nine blockchains at 4:20 p.m. ET on 29 Oct 2026. The firm also spoke to CNN about the attribution and monitored commingling of Binance with Bitget assets. Chainalysis ATTRIBUTES the Binance hack to the North Korea‑linked hacking group TraderTraitor Blockchain analytics firm Chainalysis attributes the theft to the North Korean hacking group TraderTraitor. Chainalysis said it had high confidence that a North Korean was linked to the hack. Chainalysis ties the Binance attack to the North Korean group behind Bybit Chainalysis is tied to TraderTraitor group Chainalysis identified Lazarus Group with high confidence· Entity summary generated by Graphiti
Relation timeline
BY VALID-FROM DATE- ChainalysisIDENTIFIEDLazarus Group
Chainalysis identified Lazarus Group with high confidence
- ChainalysisTIED TOTraderTraitor
Chainalysis is tied to TraderTraitor group
- ChainalysisTIED ATTACK SOURCEBybit
Chainalysis ties the Binance attack to the North Korean group behind Bybit
- ChainalysisCONFIRMED HACK LINKED TONorth Korea
Chainalysis said it had high confidence that a North Korean was linked to the hack.
- ChainalysisATTRIBUTESTraderTraitor
Blockchain analytics firm Chainalysis attributes the theft to the North Korean hacking group TraderTraitor.
- ChainalysisATTRIBUTES ATTACKTraderTraitor
Chainalysis ATTRIBUTES the Binance hack to the North Korea‑linked hacking group TraderTraitor
- ChainalysisATTACKER WALLET FUNDED BYTornado Cash
Chainalysis reported that the attacker’s wallet was funded through Tornado Cash
- ChainalysisATTRIBUTESTraderTraitor
Chainalysis attributes the Binance hack to TraderTraitor
- ChainalysisSPOKE TOCNN
Chainalysis spoke to CNN about the Binance hack attribution
- ChainalysisOBSERVEDBinance
Chainalysis observed Binance’s hot‑wallet activity during the hack
- ChainalysisOBSERVEDBitget
Chainalysis observed Binanace funds commingling with Bitget assets
- ChainalysisREPORTS ACTIVITY GROWTH INSouth Africa
Chainalysis reported that every activity category grew in South Africa
- ChainalysisANALYZEDLedger
Chainalysis analyzed the loss of more than 60 BTC from a scammer using Ledger devices.
- ChainalysisTRACKSBinance
Chainalysis is tracking the assets related to Binance.
- Jonathan LevinCO FOUNDER OFChainalysis
Jonathan Levin is co‑founder and CEO of Chainalysis
- ChainalysisOBSERVED EVENTS ONBinance
Chainalysis observed funds leaving Binance hot wallets around 4:20 pm ET on Oct 29
- ChainalysisREPORTEDBrazil
Chainalysis reported that Brazil recorded $252.5 billion in crypto activity between July 2025 and June 2026
- ChainalysisLINKED TONorth Korea
Chainalysis linked the Bitget incident to North Korea
- ChainalysisREPORTS PEER TO PEER CRYPTO VOLUME INTurkey
Chainalysis reports that peer-to-peer crypto volume in Türkiye rose fivefold to $3.56 billion on 2026-10-28
- ChainalysisSUGGESTSStarlink
Chainalysis suggests Starlink or other means as possible explanations for Iranian activity recovery
- ChainalysisDECREASES BY 80 PERCENTBitcoin
Chainalysis decreases Bitcoin activity by about 80% during Iran’s February‑to‑May 2026 shutdown
- BeInCryptoCOOPERATES WITHChainalysis
BeInCrypto cooperates with Chainalysis
- ChainalysisRANKED BEFOREUnited States
Chainalysis ranked Brazil ahead of the United States
- ChainalysisRANKED BEFOREJapan
Chainalysis ranked Brazil ahead of Japan
- ChainalysisATTRIBUTESLatin America
Chainalysis attributes Latin America’s growth to a collective pivot to stablecoins
- ChainalysisRANKED POSITION OFBrazil
Chainalysis ranked Brazil first in its 2026 Global Crypto Adoption Index
- ChainalysisRANKED BEFORESouth Korea
Chainalysis ranked Brazil ahead of South Korea
- ChainalysisHAS EMPLOYEEFrancois Volpoet
Chainalysis has employee Francois Volpoet
- ChainalysisPROVIDES REPORT2026 Global Crypto Adoption Index
Chainalysis provides the 2026 Global Crypto Adoption Index.
- ChainalysisDETERMINES RANK OFGermany
Chainalysis determines Germany's rank as 13th in global crypto adoption
- TetherFREEZES BEFOREChainalysis
Tether froze addresses before Chainalysis labeled them
- Bitcoin MagazinePUBLISHEDChainalysis
Bitcoin Magazine published an article written by Mathew Di Salvo describing Chainalysis findings about a Ledger theft
- ChainalysisMENTIONEDLedger
Chainalysis mentioned Ledger in its report on a theft that affected Ledger devices purchased through CryptoBilis
- ChainalysisIDENTIFIED LOSS OF BTCBitcoin
Chainalysis identified that a scammer lost more than 60 BTC, about $4.8 million, in the Ledger wallet drain.
- ChainalysisIDENTIFIED LOSSES TIED TOCryptoBilis
Chainalysis discovered that all confirmed Bitcoin losses were tied to devices sold by the reseller CryptoBilis.
- ChainalysisOBSERVEDBitcoin
Chainalysis observed a Bitcoin theft linked to the Ledger spy‑chip exploit
- ChainalysisIDENTIFIEDLedger spy-chip exploit
Chainalysis identified the Ledger spy‑chip exploit
- ChainalysisREPORTSLedger spy-chip exploit
Chainalysis reports the Ledger spy‑chip exploit
- ChainalysisCLAIMED LINKED TOCryptoBilis
Chainalysis claimed that the theft was linked to CryptoBilis
- ChainalysisSHOWSUnited States
Chainalysis shows the United States hoards Bitcoin
Relations are facts Graphiti extracted from reports, not verbatim quotes. An end date means later reporting showed the relation no longer holds.
Events 12
- Why North Korea's 'elite' hackers are the prime suspect in major Binance hack4 cited reports · 2026-10-31
- Binance Hack Shows Why Offshore Exchanges Need US Oversight, CFTC Chair Says1 cited report · 2026-10-31
- Worried About Crypto Hacks? Buy Bitcoin Proxies in Stock Market Instead, Say Wall Street Firms1 cited report · 2026-10-31
- Crypto giant Binance attempting to recover $6.3bn stolen in hack linked to North Korea1 cited report · 2026-10-31
- Binance Sets Aside $6.34B to Cover Hack Losses, CEO Says 'Your Assets Are Safe'1 cited report · 2026-10-31
- What is EIP-7702? The Ethereum Upgrade Behind the $6.4B Binance Hack1 cited report · 2026-10-30
- South Africa’s Crypto Grew 52% in A Bear Market. Then Came the Permission Slips1 cited report · 2026-10-30
- Trezor Warns CryptoBilis Buyers After Report of Hardware Implant in Safe 51 cited report · 2026-10-30
- As it happened: Binance’s record $6.3B crypto hack1 cited report · 2026-10-30
- Brazil’s Halloween eve crypto deadline brings more tricks than treats1 cited report · 2026-10-29
- Wheat Posts Longest Losing Streak Since 1997: What It Means for Portfolios1 cited report · 2026-10-29
- North Korea’s $600 million fake-worker empire has a hidden crypto connection1 cited report · 2026-10-29
Source reports 30
- Why North Korea's 'elite' hackers are the prime suspect in major Binance hackBBC World · 2026-10-31
- Binance Hack Shows Why Offshore Exchanges Need US Oversight, CFTC Chair SaysDecrypt · 2026-10-31
- Worried About Crypto Hacks? Buy Bitcoin Proxies in Stock Market Instead, Say Wall Street FirmsDecrypt · 2026-10-31
- Binance Hack: Why Bitcoin Didn't Crash Like It Did in 2018Decrypt · 2026-10-31
- Crypto giant Binance attempting to recover $6.3bn stolen in hack linked to North KoreaBBC World · 2026-10-31
- Binance Sets Aside $6.34B to Cover Hack Losses, CEO Says 'Your Assets Are Safe'Decrypt · 2026-10-31
- Elon Musk, CZ Trade Blows Over SpaceX Shares After $6.4B Binance HackDecrypt · 2026-10-31
- What is EIP-7702? The Ethereum Upgrade Behind the $6.4B Binance HackDecrypt · 2026-10-30
- Blockchain Firms Link North Korea to $6.3 Billion Binance HackBitcoin Magazine · 2026-10-30
- TRM and Chainalysis Tie $6.4B Binance Hack to North Korea's TraderTraitorDecrypt · 2026-10-30
- South Africa’s Crypto Grew 52% in A Bear Market. Then Came the Permission SlipsBeInCrypto · 2026-10-30
- Trezor Warns CryptoBilis Buyers After Report of Hardware Implant in Safe 5Decrypt · 2026-10-30
- As it happened: Binance’s record $6.3B crypto hackCointelegraph · 2026-10-30
- Brazil’s Halloween eve crypto deadline brings more tricks than treatsCointelegraph · 2026-10-29
- Wheat Posts Longest Losing Streak Since 1997: What It Means for PortfoliosBeInCrypto · 2026-10-29
- North Korea’s $600 million fake-worker empire has a hidden crypto connectionCryptoSlate · 2026-10-29
- Centralized Exchange and DeFi Losses Dominate 2026 Crypto Hacks Despite Hardware Wallet FailuresBitcoin Magazine · 2026-10-29
- Iran-linked Bitcoin activity fell about 80%, then rebounded during the blackoutCryptoSlate · 2026-10-28
- Polymarket Has Investigated 'Dozens' of Midterm Election Bets: ReportDecrypt · 2026-10-27
- XT Exchange: A Maturing Crypto Industry Must Keep Individual Participation at Its CoreBeInCrypto · 2026-10-23
- Is the AI Agent Economy Really Booming? 6.4M Payments Tell a Different StoryBeInCrypto · 2026-10-21
- XT Exchange and the Local Stories Behind Global Crypto AdoptionBeInCrypto · 2026-10-21
- France's parliament approves vote to hit stablecoin trades with 31% capital gains taxCoinDesk · 2026-10-20
- Eight Years In, XT Exchange’s Job Keeps ChangingBeInCrypto · 2026-10-20
- Sparkasse Savings Banks Open Crypto Trading in Germany Alongside Usual BankingBeInCrypto · 2026-10-20
- Tether: Senator's investigation misses positive work that's led to lower Iran volumesCoinDesk · 2026-10-20
- Crypto exchanges Binance, Coinbase join West Africa scam sweep that flagged $11 millionCoinDesk · 2026-10-18
- Poetic Justice: Scammer Lost $5M in Bitcoin After Being Targeted by Ledger ThievesBitcoin Magazine · 2026-10-17
- Scammer Lost $4.8M in Bitcoin to Tampered Ledger Wallets: ChainalysisDecrypt · 2026-10-16
- Scammer gets scammed in Ledger spy-chip exploit, loses almost $5 million in bitcoinCoinDesk · 2026-10-16