TraderTraitor
Named by 17 kept items in this workspace.
16 items name it under threat actors and 1 under classification.key entities.
Search every workspace for TraderTraitor. It matches the name as written, so it can find other things that share it.
The items that name it 17
linked to the Binance attack by TRM Labs and Chainalysis, and to the $1.5 billion Bybit hack last year; Binance has not confirmed the attackers' identities
North Korean hacking group, attributed by TRM Labs and Chainalysis to the $6.4 billion Binance theft; previously linked to the $1.5 billion Bybit hack in February 2025
North Korean hacking group; TRM Labs and Chainalysis attributed the Binance theft to it
North Korean hacking group, attributed by TRM Labs and Chainalysis for the Binance hack of October 29, 2026 that moved some $6.4 billion; also behind the $1.5 billion Bybit hack in February 2025
North Korean hacking unit; attributed by TRM Labs and Chainalysis for the Binance incident, not confirmed by Binance
North Korean hacking group; blamed by TRM Labs and Chainalysis for the Binance hack of about $6.36 billion to $6.4 billion, October 2026; the FBI attributed the $1.5 billion Bybit hack of February 2025 to the same group
North Korean state-sponsored hacking unit; TRM attributes the Binance theft of 29 October 2026 to it with high confidence; Chainalysis CEO Jonathan Levin separately assessed it likely carried it out; the FBI previously attributed the February 2025 Bybit attack to the same group
North Korean cybercrime group, attributed by Chainalysis as responsible for the Binance hack of October 29, with a $6.4 billion theft
North Korean state-backed hacking unit, also tracked as Lazarus Group and APT38; attributed by TRM Labs and confirmed by Chainalysis with "a high degree of confidence"; Binance itself has not linked the incident to a group
North Korea's elite hacking unit; attributed by TRM Labs with high confidence as the Binance attacker, and by the FBI for the Bybit theft
suspected by TRM Labs with a high degree of confidence; believed to be part of the Lazarus Group; linked to the February 2025 Bybit theft of $1.5 billion
Group attributed by AFX to the earlier AFX exploit; onchain researcher Specter linked part of the stolen XRP trail from the Bitget hack to infrastructure connected with that AFX exploit.
- Weekly Research Brief: Binance Hacked; Hyperliquid on Wall Street; Prediction Markets’ Brazil ‘Miss’
North Korea's Lazarus-linked unit; attributed by TRM Labs and Chainalysis as the attacker behind the roughly $6.3b Binance theft
TRM Labs links the laundering network handling the Bitget proceeds to one previously used by TraderTraitor, without definitive attribution of the intrusion itself.
All threat actors in this workspace.