TraderTraitor drained about $6.36 billion from Binance wallets
Original title: North Korean Hackers Steal $6.36 Billion From Binance in Largest Crypto Hack Ever
TRM Labs says most funds left in about 20 minutes on October 29 across ten chains; Binance says user funds are safe.
TRM Labs says North Korea’s TraderTraitor group drained about $6.36 billion from Binance wallets on October 29, 2026, calling it the largest crypto theft on record. Outflows began at 20:05 UTC and, on Ethereum, used EIP-7702 delegations to a sweeper contract; other chains used ordinary signed transfers. Binance suspended some withdrawals and has not published a root cause. TRM says about $2.7 billion was frozen by 00:30 UTC on October 30, while the attacker still held about $2.4 billion.
Unconfirmed: Binance has not published a root cause; attribution rests on patterns, and TRM says figures may change.
- Ethereum sweep moved 167,464 ETH and 63 tokens, including 1.615 billion USDT.
- Tether, Circle, Ripple and others froze stablecoins; Arbitrum moved about $30 million.
- The attacker sold about 325 million USDT and still held over 420,000 ETH and 18,270 BTC.
- BBC reports Binance’s preliminary finding points to a compromised engineer’s laptop.
- TRM links the pattern to earlier Bybit and KelpDAO attacks; figures may change.
Impact: About $6.36 billion taken from Binance hot wallets
- 1.Screen deposits and counterparties against labeled attacker addresses.
- 2.Alert on any EIP-7702 delegation on treasury wallets.
- 3.Reject unexpected EIP-7702 authorizations, especially many nonces at once.
- Threat actors
- TraderTraitor
- Victims
- Binance
- Countries
- North Korea
From the original article
3 min read at gbhackers.com
North Korea’s TraderTraitor group drained about $6. 36 billion from Binance wallets across ten blockchains on October 29, 2026. TRM Labs, which published the findings, calls it the largest crypto theft on record.
By Kavichselvan · gbhackers.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.