Independent record. Not associated with, endorsed by or operated by Binance. This site is read-only: there is nothing to sign in to, pay for or connect.

All briefings

Briefing for 2026-11-04

Generated . Each line is a statement somebody made, not a finding of this site.

  1. Reportedclaim The Record reported that the company was alerted to the large transfers and began an investigation, but then $1.4 billion in bitcoin left the platform, and that the hackers used other mechanisms to conduct 50 other transactions that enabled the theft of $6.34 billion.

    The Record. Original

  2. Reportedclaim CNBC reported that Teng himself did not attribute the attack to North Korea but acknowledged that the FBI has linked it to North Korean hackers tied to the TraderTraitor group.

    CNBC. Original

  3. Reportedclaim The Guardian reported that Binance said: “This should not have happened, and we apologise for the concern, disruption and uncertainty it caused our users, partners and the wider industry.”

    The Guardian. Original

  4. Reportedclaim BleepingComputer reported that Binance says North Korean hackers used a fake job interview to trick an employee into installing malware that ultimately let them compromise the company's wallet infrastructure and steal about $6.34 billion in digital assets.

    BleepingComputer. Original

  5. Reportedclaim BleepingComputer reported that the malware employed sophisticated obfuscation and evasion techniques, including replacing a legitimate development tool component with a malicious version to execute commands and establish communication with an attacker-controlled external server.

    BleepingComputer. Original

  6. Reportedclaim BleepingComputer reported that on October 29, the hackers used the stolen credentials to deploy a malicious script and gain unauthorized access to Binance's wallet signing service, allowing them to transfer billions of dollars in cryptocurrency across multiple blockchains.

    BleepingComputer. Original

  7. Reportedclaim BleepingComputer reported that the attackers also abused Ethereum's EIP-7702 authorization mechanism, allowing them to continue stealing cryptocurrency even after the exchange suspended withdrawals.

    BleepingComputer. Original

  8. Reportedclaim BleepingComputer reported that Binance says it is continuing to investigate the breach and has brought in independent security firms to review its findings.

    BleepingComputer. Original

  9. Reportedclaim Chainalysis said the Binance investigation remains ongoing and that it expects the stolen funds to continue moving in the coming days.

    Chainalysis. Original

  10. Officialclaim Binance reported that it has replenished approximately 98% of the impacted amount and is buying the remaining 2% through market and OTC channels.

    Binance. Original