trmlabs

Binance Hit by Biggest Crypto Hack in History: What We Know
Binance, the world’s largest crypto exchange, has been hit by a theft estimated at $6.3 billion, and investigators are already pointing at North Korea.
What happened
On October 29, Binance began investigating suspicious outflows from its hot wallets, the online wallets that process customer withdrawals. Withdrawals were suspended while the incident unfolded. Tether and Circle froze more than $2.38 billion in stablecoins tied to the incident. Binance said about $3 billion in assets had been frozen, with more freezes possible as investigators trace the funds.
The final loss is estimated far higher than what was frozen. Binance’s estimated impact is $6.3 billion, and Chainalysis put the theft at $6.4 billion. If confirmed, it would surpass the $3.5 billion LuBian hack of 2020 and the $1.5 billion Bybit hack of 2025.
How the attackers may have done it
Binance hasn’t confirmed the method. Blockaid’s CEO said the preliminary evidence points to compromised signing infrastructure rather than a leaked private key, meaning attackers got a legitimate signing system to approve malicious transactions. Blockaid’s onchain analysis found 50 EIP-7702 authorizations bundled into one transaction, delegating an account to an unverified contract that could drain its funds. One headline reports Binance itself pointing to an engineer’s hacked laptop, though details are thin.
Who’s suspected
TRM Labs attributed the attack to North Korea’s TraderTraitor group with “high confidence,” and Chainalysis’ CEO reached the same assessment. ZachXBT found that funds from Binance and the earlier Bitget exploit ended up at the same address after passing through THORChain, suggesting one actor behind both. These attributions come from private analysts, not a government finding.
The playbook fits TraderTraitor’s history. The FBI says the group targets employees through social engineering, and in a 2024 case an attacker posing as a recruiter sent a malicious coding test to an employee of a wallet provider.
Market impact
BNB fell about 8% and Bitcoin slid toward $77,000 as the news spread.
What it means for you
Funds on exchanges are never fully safe. Even the biggest platforms can fail, so keep only what you’re actively trading on an exchange.
Watch for follow-on scams. Fake “Binance recovery” or “compensation” messages typically spread after an incident like this.
Wait for official statements. The loss figures, the method and the attribution are all still being worked out.
#binancehack #Hack #userfundsafe #TRMLabs #NorthKoreaHackers

Onchain transparency has just dealt another massive blow to illicit finance networks.
Blockchain intelligence firm TRM Labs has officially traced $16.8 million flowing into 30 cryptocurrency addresses directly linked to members of Iran’s sanctioned Mabna Institute. This development puts a sharp spotlight on how global regulators and compliance teams are leveraging blockchain forensic tech to lock down the global financial ecosystem.
The Investigation Breakdown
The Mabna Institute—infamous for its state-sponsored cyber espionage and infrastructure hacking campaigns—has long been under heavy international sanctions. However, the latest onchain footprint reveals a highly active network:
The Moving Capital: Approximately $16.8 million was funneled across a network of 30 specific crypto addresses.The Analytics Powerhouse: TRM Labs mapped out the multi-layered transaction history, effectively pulling back the curtain on the complex obfuscation methods used by these sanctioned individuals.The Main Assets: The funds were heavily consolidated across liquid assets, including Bitcoin (BTC) and prominent stablecoins, used to move value across borders outside traditional banking systems.
Why This Matters for the Crypto Market
The Compliance Tightrope: For Web3 platforms, decentralized protocols, and centralized exchanges (CEXs), this tracing report acts as an immediate warning. Interacting with these blacklisted addresses carries severe regulatory penalties.The "Immutable Registry" Effect: Bad actors often choose crypto for speed, but they forget the blockchain never forgets. TRM Labs' ability to aggregate and expose millions of dollars in state-affiliated funds proves that public ledgers make hiding illicit capital increasingly impossible.Push for Stricter Regulations: Incidents like this will likely accelerate the global push for stricter Know-Your-Customer (KYC) and Anti-Money Laundering (AML) enforcement, particularly regarding unhosted wallets and cross-border transfers.
The Takeaway
As the crypto industry matures, the line between rogue state finance and institutional-grade compliance is being drawn by data analytics. While headlines like this can trigger short-term regulatory debates, the long-term reality is clear: data transparency is making the crypto ecosystem a hostile environment for illicit actors, ultimately paving the way for safer, mainstream adoption.
Is absolute transparency a win for the crypto space? Share your thoughts below!
#CryptoNews #BlockchainAnalytics #TRMLabs #CryptoCompliance #RegulatoryNews

⚠️ GLOBAL ALERT: TRM Labs warns about cryptocurrency scams using the 2026 World Cup as bait
The football fever not only moves millions of fans but also the global cybercrime networks. The blockchain intelligence firm, TRM Labs, has issued an official alert warning that scammers are deploying advanced malicious infrastructures to steal assets using fake promotions for the 2026 World Cup. 💻🛡️
TradingView+ 1
The 3 fraud vectors detected by analysts: