North Korea-linked hacking group, TraderTraitor, spent about 8 weeks inside Binance’s systems before the October 29 2026 attack that resulted in approximately $6.4 billion in losses, according to a new report by the Security Alliance (SEAL).
MILESTONE | Binance Gets Hacked in the Largest Crypto Exploit in History
#Binance, the world’s largest cryptocurrency exchange, is investigating a security breach after on-chain data showed billions of dollars in digital assets moving from wallets linked to the platform to newly created external addresses.
Reports put the figure at over $6 billion making it the largest ever crypto attack in history.
According to blockchain intelligence firm, #Arkham, the hackers held over $5.7 billion stolen from Binance including:
$1.5 billion in $BTC$900 million in $ETH~$1.5 billion in $USDTOver $800 million in $USDC
Details: https://t.co/CgxPsMAUNz
#BinanceHack #CryptoHack #CryptoHacks2026 #CryptoMilestone
— BitKE (@BitcoinKE) October 30, 2026
The November 5 2026 report said the group used sophisticated social engineering, fake recruitment companies, and malicious coding assignments to compromise cryptocurrency developers and gain access to critical infrastructure.
SEAL said the Binance intrusion likely began with malware delivered through a fraudulent job interview targeting a developer’s device. It warned against confusing TraderTraitor with another North Korean hacking cluster, Contagious Interview, which uses similar recruitment lures but employs different tactics.
The group has also been linked to attacks involving LayerZero, Bitget and AFX. Its operations included approximately six weeks inside LayerZero, three weeks at AFX and at least 24 days of access to Bitget’s infrastructure before a September 24 theft.
MILESTONE | BitGet Has Lost Over $350 Million in the Biggest Hack of 2026 So Far
The report identified several suspected fake recruitment companies used in the campaigns, including CitaLab, BitFit and Oddium.
SEAL said TraderTraitor’s operations were characterised by
prolonged reconnaissance,
lateral movement across company systems, and
abuse of legitimate signing infrastructure
rather than necessarily stealing private keys.
It urged crypto companies to strengthen monitoring of developer devices, cloud credentials, withdrawal systems, and 3rd-party security products, warning that employee compromise could remain undetected for weeks.
CRYPTO CRIME | The Indian Cyber-Security Agency Reveals How AI is Getting Used to Steal Funds
Sign up to BitKE to get the latest updates on crypto crime.
Join our WhatsApp channel here.
Follow us on X for the latest posts and updates
Join and interact with our Telegram community
_________
Related
Click Here For The Original Source.
——————————————————–
