ReportedattributionStatement 157
Hacken's timeline table lists the first public attribution to TraderTraitor at 04:30 UTC on October 30, citing The Next Web.
04:30 | First public attribution to TraderTraitor.
Statements
Each statement is one attributed line with a verbatim quote from a stored copy of the source. Only approved statements are shown.
Official means the party said it, not that it is true.
- Verified on-chain. Reproduced by us from raw chain data kept in our own storage. The method is shown.
- Official. Stated by the party concerned (an exchange, an agency, a token issuer or similar), attributed to them. Official means the party said it, not that it is true.
- Reported. Stated by news media or an analytics firm, attributed to them.
- Disputed. Credible sources conflict. The statement links the sources that disagree.
- Debunked. Contradicted by primary evidence, which is linked.
- Theory. Speculation, attributed to whoever proposed it, shown with the evidence for and against.
60 statements match these filters.
ReportedattributionStatement 782
Jonathan Levin of Chainalysis posted on X that Chainalysis assessed the hack as likely done by the DPRK group TraderTraitor due to links to a previous hack.
We assess @binance hack for $6.4B was likely done by DPRK group TraderTraitor due to links to previous hack.
OfficialattributionStatement 283
Binance said in its first 30 October update that it was working with law enforcement partners to confirm the identity of the criminals.
We are working closely with our law enforcement partners to confirm the identity of these criminals and bring them to justice.
ReportedattributionStatement 217
US President Donald Trump said he did not know if North Korean hackers were behind the theft but that his administration is looking into it.
US President Donald Trump, asked on Friday whether North Korean hackers were behind the theft, said he did not know but his administration is looking into it.
ReportedattributionStatement 387
The article states that the attack, described as the largest in crypto history, began at 8:04 pm UTC on Thursday and that the perpetrators were linked to North Korean hackers.
The attack, the largest in crypto history, began at 8:04 pm UTC Thursday and the perpetrators, linked to the same North Korean hackers behind last month’s Bitget hack, immediately began converting assets.
ReportedattributionStatement 515
Blockaid CEO Ido Ben-Natan stated that the activity resembled operations linked to North Korea, citing Blockaid's familiarity with those attacks, but emphasized that the attribution remained unconfirmed.
Ben-Natan also said the activity resembled operations linked to North Korea, citing Blockaid’s familiarity with those attacks. He pointed to sophisticated onchain preparations but emphasized that the attribution remained unconfirmed.
ReportedattributionStatement 514
Arkham CEO Miguel Morel stated that there was insufficient information to determine whether the attack involved stolen keys or compromised infrastructure and that the hack appeared to be still ongoing.
Before Binance’s latest update, Arkham CEO Miguel Morel told Cointelegraph there was insufficient information to determine whether the attack involved stolen keys or compromised infrastructure. “From what we can tell, it appears the hack is still ongoing,” he said at the time.
ReportedattributionStatement 216
TRM Labs and Chainalysis noted that the heist bore similarities to previous large attacks blamed on North Korea.
The bulk of the Binance heist unfolded in around 20 minutes beginning late on Thursday and bore similarities to previous large attacks blamed on North Korea, according to US blockchain analysis firms TRM Labs and Chainalysis.
ReportedattributionStatement 45
TRM attributed the attack to TraderTraitor, which it described as North Korea's elite hacking unit, with high confidence.
TRM, in a post on its website Thursday, attributed the attack to TraderTraitor, which it described as North Korea's elite hacking unit. "We make this judgment with high confidence," the firm said.
ReportedattributionStatement 15
Three analytics firms linked the attack to North Korean state actors.
Three analytics firms link the attack to North Korean state actors.