TraderTraitor
TraderTraitor is a North‑Korean hacking unit. On 30 Oct 2026, crypto‑analytics firms TRM Labs and Chainalysis confirmed the group as the perpetrator of the $6.3 billion Binance hack that froze >$2.5 billion in assets and prompted withdrawal suspensions. The same group is also linked to the ByBit hack. The Binance hack involved a self‑destruct mechanism and an EIP‑7702 delegation that bypassed normal approval controls. Binance’s CEO Richard Teng noted the attack was carried out by TraderTraitor as part of a North‑Korean effort. TraderTraitor was also identified by Singapore‑based Pangolin Intelligence and a US analyst report linking it to North‑Korean state actors. The hack led Binance to reserve $6.34 billion of company funds to cover losses and maintain customer withdrawals. The group’s operations have been described as “high confidence” by the analytics firms. The group has also been implicated in other crypto‑theft incidents such as Bitget and the Kelp DAO exploit. TraderTraitor is linked to Bybit North Korea is associated with TraderTraitor group TRM is tied to TraderTraitor group Chainalysis is tied to TraderTraitor group Binance Hack is linked to North Korea’s TraderTraitor group Lazarus Group is also known as TraderTraitor TRM Labs attributes the Binance hack to TraderTraitor group Jonathan Levin pointed to TraderTraitor group as the actor behind the $6.3B Binance hack The FBI claims that TraderTraitor targets company employees through social engineering TraderTraitor group is linked to the $6.3B Binance hack· Entity summary generated by Graphiti
Relation timeline
BY VALID-FROM DATE- Multi-billion Binance hackLINKED TOTraderTraitor
Binance Hack is linked to North Korea’s TraderTraitor group
- ChainalysisTIED TOTraderTraitor
Chainalysis is tied to TraderTraitor group
- TRMTIED TOTraderTraitor
TRM is tied to TraderTraitor group
- North KoreaASSOCIATED WITHTraderTraitor
North Korea is associated with TraderTraitor group
- TraderTraitorLINKED TOBybit
TraderTraitor is linked to Bybit
- TRM LabsATTRIBUTESTraderTraitor
Blockchain analytics firm TRM Labs attributes the theft to the North Korean hacking group TraderTraitor.
- ChainalysisATTRIBUTESTraderTraitor
Blockchain analytics firm Chainalysis attributes the theft to the North Korean hacking group TraderTraitor.
- ChainalysisATTRIBUTES ATTACKTraderTraitor
Chainalysis ATTRIBUTES the Binance hack to the North Korea‑linked hacking group TraderTraitor
- TRM LabsATTRIBUTED THE THEFT TOTraderTraitor
TRM Labs ATTRIBUTED_THE_THEFT_TO TraderTraitor
- TraderTraitorCAUSED HACKBinance
TraderTraitor group caused the Binance hack
- ChainalysisATTRIBUTESTraderTraitor
Chainalysis attributes the Binance hack to TraderTraitor
- Singapore-based Pangolin IntelligenceCLAIMEDTraderTraitor
Singapore-based Pangolin Intelligence claimed TraderTraitor was responsible for the Binance hack
- TraderTraitorUSEDTornado Cash
TraderTraitor used Tornado Cash to fund the operational wallet
- TraderTraitorPLANTED CODE INSafe
TraderTraitor planted malicious code in Safe’s infrastructure
- TraderTraitorRESPONSIBLE FORBinance attack
TraderTraitor is responsible for the Binance attack
- TRM LabsATTRIBUTED INCIDENT TOTraderTraitor
TRM Labs attributed the Binance incident to North Korea-linked TraderTraitor
- BitgetATTRIBUTED TOTraderTraitor
Bitget was attributed to TraderTraitor
- TraderTraitorRESPONSIBLE FORBybit
TraderTraitor is responsible for the ByBit hack.
- GugaOnChainPOINTED TOTraderTraitor
Chainalysis co‑founder Jonathan Levin pointed to TraderTraitor.
- Jonathan LevinPOINTED TOTraderTraitor
Jonathan Levin pointed to TraderTraitor group as the actor behind the $6.3B Binance hack
- TraderTraitorATTACKEDBinance
TraderTraitor group is linked to the $6.3B Binance hack
- TRM LabsATTRIBUTES TOTraderTraitor
TRM Labs attributes the Binance hack to TraderTraitor group
- TraderTraitorLINKED TOMulti-billion Binance hack
TraderTraitor was linked to the $6.3 B Binance hack.
- FBICLAIMSTraderTraitor
The FBI claims that TraderTraitor targets company employees through social engineering
- TraderTraitorSTOLEN FROMBinance
TraderTraitor stole money from Binance, identified by TRM Labs.
- TRM LabsATTRIBUTED BINANCE HACK TOTraderTraitor
TRM Labs attributed the Binance hack to TraderTraitor with high confidence.
- Ido Ben-NatanCLAIMSTraderTraitor
Ido Ben-Natan claims that TraderTraitor’s work resembles that of North Korea.
- TRM LabsATTRIBUTESTraderTraitor
TRM Labs attributes the Binance hack to TraderTraitor.
- FBINAMESTraderTraitor
The FBI names TraderTraitor as the group behind the ByBit hack.
- TraderTraitorRELATED TOKelpDAO
TraderTraitor has overlap with the Kelp DAO exploit
- ZachXBTASSERTSTraderTraitor
ZachXBT asserts that TraderTraitor is responsible for both the Binance and Bitget exploits.
- Jonathan LevinCLAIMEDTraderTraitor
Jonathan Levin claimed that TraderTraitor was behind the Binance hack
- BinanceATTACKED BYTraderTraitor
Binance was attacked by TraderTraitor
- USDC.eCLAIMSTraderTraitor
Jonathan Levin claims that TraderTraitor performed the Binance hack.
- TraderTraitorAFFILIATED WITHNorth Korea
TraderTraitor is a North Korean hacking unit
- TraderTraitorHAS OVERLAP WITHKelpDAO
TraiderTraitor overlaps with Kelp DAO
- TraderTraitorASSOCIATED WITHNorth Korea
TraderTraitor is associated with North Korea
- BinanceHACK LINKED TOTraderTraitor
Binance's $6.3B hack is linked to TraderTraitor
- TraderTraitorCAUSEDBybit hack
TraderTraitor CAUSED Bybit hack
- BinanceCAUSED BYTraderTraitor
Binance Hack was CAUSED_BY the North Korea‑linked hacking group TraderTraitor
Relations are facts Graphiti extracted from reports, not verbatim quotes. An end date means later reporting showed the relation no longer holds.
Events 6
- Why North Korea's 'elite' hackers are the prime suspect in major Binance hack4 cited reports · 2026-10-31
- Binance Hack Shows Why Offshore Exchanges Need US Oversight, CFTC Chair Says6 cited reports · 2026-10-31
- Worried About Crypto Hacks? Buy Bitcoin Proxies in Stock Market Instead, Say Wall Street Firms1 cited report · 2026-10-31
- Binance Sets Aside $6.34B to Cover Hack Losses, CEO Says 'Your Assets Are Safe'1 cited report · 2026-10-31
- What is EIP-7702? The Ethereum Upgrade Behind the $6.4B Binance Hack1 cited report · 2026-10-30
- As it happened: Binance’s record $6.3B crypto hack2 cited reports · 2026-10-30
Source reports 17
- Why North Korea's 'elite' hackers are the prime suspect in major Binance hackBBC World · 2026-10-31
- What to Know About the $6.3 Billion Binance HackBitcoin Magazine · 2026-10-31
- Binance Hack Shows Why Offshore Exchanges Need US Oversight, CFTC Chair SaysDecrypt · 2026-10-31
- Worried About Crypto Hacks? Buy Bitcoin Proxies in Stock Market Instead, Say Wall Street FirmsDecrypt · 2026-10-31
- Secret Service, FBI Join Binance Hack Probe as Circle Freezes $823 MillionDecrypt · 2026-10-31
- Binance Sets Aside $6.34B to Cover Hack Losses, CEO Says 'Your Assets Are Safe'Decrypt · 2026-10-31
- Elon Musk, CZ Trade Blows Over SpaceX Shares After $6.4B Binance HackDecrypt · 2026-10-31
- What is EIP-7702? The Ethereum Upgrade Behind the $6.4B Binance HackDecrypt · 2026-10-30
- Blockchain Firms Link North Korea to $6.3 Billion Binance HackBitcoin Magazine · 2026-10-30
- TRM and Chainalysis Tie $6.4B Binance Hack to North Korea's TraderTraitorDecrypt · 2026-10-30
- Binance uncovers more breach points in $6 billion hackCryptoSlate · 2026-10-30
- Binance hacker’s Bitcoin haul tops Coinbase’s corporate treasuryCointelegraph · 2026-10-30
- As it happened: Binance’s record $6.3B crypto hackCointelegraph · 2026-10-30
- North Korea’s TraderTraitor linked to $6.3B Binance hackCointelegraph · 2026-10-30
- Crypto giant Binance hit by $6.3bn hack suspected to be largest in historyBBC Business · 2026-10-30
- Binance Hack: $6.3 Billion Impacted, Circle and Tether Freeze, Crypto Markets ReactBeInCrypto · 2026-10-30
- Binance hit by $6.3B hack, the largest in cryptocurrency historyCointelegraph · 2026-10-30