Overview
- The Oct. 29 hot-wallet breach at Binance stole about $6.3 billion and the FBI has publicly attributed the attack to the North Korean-linked TraderTraitor group.
- On Nov. 3, blockchain tracker Onchain Lens flagged a theft-linked address depositing 8,567 SOL (about $798,000) into Privacy Cash, a Solana-based mixer that hides links between deposits and withdrawals.
- Analytics firm Elliptic reported roughly 87,000 SOL moved from the original Solana theft wallet and estimates about $3.18 billion still sits in addresses tied to the hack.
- Binance co-CEO Richard Teng said the exchange has purchased replacement assets to restore about 98% of affected customer balances, a move that does not mean law enforcement has recovered the stolen coins.
- Binance says attackers used social-engineering, malicious developer software, and an internal AI tool to reach wallet authorization systems, a pattern that highlights risks to staff practices and the need for tighter privileged-access controls and continuous training.