TRM Labs attributes approximately $6.36 billion moved from Binance to North Korea-linked TraderTraitor
TRM attributes a roughly $6.36 billion multi-chain outflow from Binance to North Korea-linked TraderTraitor; stablecoin issuers froze over $2.3 billion tied to the flows.
- Urgency
- L4
- 88
- 90
- 85
- 80
- 85
At a glance
On October 29, 2026, TRM Labs reported an on-chain reconstruction estimating about $6.36 billion was moved from Binance-linked wallets, and TRM attributed the transfers to TraderTraitor, which it described as North Korea's elite hacking unit, with high confidence. Stablecoin issuers Tether and Circle have frozen more than $2.3 billion in assets tied to the incident.
- TRM attributes a roughly $6.36 billion multi-chain outflow from Binance to North Korea-linked TraderTraitor; stablecoin issuers froze over $2.3 billion tied to the flows.
CHRONOS Wire · October 31 · Alert 4
What happened
On October 29, 2026, about $6.36 billion was moved from wallets tied to Binance. TRM Labs says it attributes the transfers to TraderTraitor, a North Korea linked hacking unit, with high confidence. Stablecoin issuers Tether and Circle have frozen more than $2.3 billion in assets tied to the incident.
Why it matters
The sums involved are very large and funds are moving across multiple blockchains; prompt monitoring is needed to track freezes, further transfers, and law enforcement responses.
CHRONOS Bottom Line
TRM attributes a roughly $6.36 billion multi-chain outflow from Binance to North Korea-linked TraderTraitor, and stablecoin issuers have already frozen over $2.3 billion tied to those flows.
Full detail
What changed
TRM Labs published an on-chain reconstruction estimating $6.36 billion moved from Binance-linked wallets and attributed the transfers to TraderTraitor with high confidence. Stablecoin issuers have frozen more than $2.3 billion associated with the incident.
What is genuinely new
TRM Labs published an on-chain reconstruction estimating approximately $6.36 billion moved from Binance wallets and stated its attribution to TraderTraitor with high confidence; stablecoin issuers Tether and Circle have frozen more than $2.3 billion linked to the incident.
Detailed analysis
TRM Labs published an on-chain reconstruction showing approximately $6.36 billion moved from Binance-linked wallets across ten blockchains on October 29, 2026, and stated its attribution to TraderTraitor with high confidence. Independent reporting notes that stablecoin issuers Tether and Circle froze over $2.3 billion associated with the flows. There is no sourced evidence in the provided material that Binance itself reported freezing ~$3 billion on-chain or that Binance suspended deposits and withdrawals as of the cited excerpts.
U.S. Impact
U.S. Impact assessment pending.