Chainalysis says hacker using ‘offensive agentic techniques’ accessed its customers’ names and emails
Chainalysis disclosed on 30 October 2026 that an attacker using "offensive agentic techniques" accessed customer names, emails, user IDs and role labels, but no investigation content, passwords or session tokens. The report also covers the Binance hack (about $6.3-6.4 billion, attributed to North Korea), where funds loop through addresses and JustLend lending on Tron is used to dodge stablecoin freezes. About $2.8 billion is frozen.
TL;DR Chainalysis discloses an AI-assisted breach of customer contact data and tracks DPRK laundering of Binance hack funds via Tron lending.
Organisations named here
- Binance
- Chainalysis
Technologies named here
- Binance
- TRON
- Chainalysis customer accounts (names, emails, user IDs and role labels accessed)
- JustLend
- JustLend on Tron
Techniques named here
- Funds laundering through address looping
- Offensive agentic techniques
- Stablecoin freeze evasion via lending receipts
Concepts named here
- Customer data exposure scope
- Stablecoin freezes
Threat actors named here
- North Korea
- DPRK
Related in Threat Intel
Reverse Engineering the Six Stages of MacSync Stealer and RAT
AI-Coded Malware | Analyzing Vibe-Coded AD Enumeration | Huntress
