Binance hackers had 8 weeks of access before $6.3B exploit, Security Alliance estimates
Security Alliance estimates North Korea-linked TraderTraitor had access to Binance systems from September, about eight weeks before the Oct. 29 exploit that stole $6.3 billion. The group reportedly used fake recruitment campaigns, with SEAL identifying four associated front companies. SEAL described similar prolonged access before other crypto exploits, including attacks involving Bitget, LayerZero and AFX. Binance has attributed the breach to a fake job interview that compromised an employee’s device and credentials, while saying a separate device compromise in June let attackers gather information about its staff and wallet infrastructure. The FBI also attributed the attack to TraderTraitor; Kim Yo Jong rejected the accusation. Binance did not respond to a request for comment on SEAL’s estimate.
