Skip to content

TraderTraitor

Named by 17 kept items in this workspace.

16 items name it under threat actors and 1 under classification.key entities.

Search every workspace for TraderTraitor. It matches the name as written, so it can find other things that share it.

The items that name it 17

  • articleas threat actors2026-10-30

    linked to the Binance attack by TRM Labs and Chainalysis, and to the $1.5 billion Bybit hack last year; Binance has not confirmed the attackers' identities

  • articleas threat actors2026-10-30

    North Korean hacking group, attributed by TRM Labs and Chainalysis to the $6.4 billion Binance theft; previously linked to the $1.5 billion Bybit hack in February 2025

  • articleas threat actors2026-10-30

    North Korean hacking group; TRM Labs and Chainalysis attributed the Binance theft to it

  • articleas threat actors2026-10-30It is written here as TraderTraitor (North Korean hacking group, attributed by TRM Labs and Chainalysis for the Binance hack of October 29, 2026 that moved some $6.4 billion; also behind the $1.5 billion Bybit hack in February 2025).

    North Korean hacking group, attributed by TRM Labs and Chainalysis for the Binance hack of October 29, 2026 that moved some $6.4 billion; also behind the $1.5 billion Bybit hack in February 2025

  • articleas threat actors2026-10-30It is written here as TraderTraitor (North Korean hacking unit; attributed by TRM Labs and Chainalysis for the Binance incident, not confirmed by Binance).

    North Korean hacking unit; attributed by TRM Labs and Chainalysis for the Binance incident, not confirmed by Binance

  • articleas threat actors2026-10-30It is written here as TraderTraitor (North Korean hacking group; blamed by TRM Labs and Chainalysis for the Binance hack of about $6.36 billion to $6.4 billion, October 2026; the FBI attributed the $1.5 billion Bybit hack of February 2025 to the same group).

    North Korean hacking group; blamed by TRM Labs and Chainalysis for the Binance hack of about $6.36 billion to $6.4 billion, October 2026; the FBI attributed the $1.5 billion Bybit hack of February 2025 to the same group

  • articleas threat actors2026-10-30It is written here as TraderTraitor (North Korean state-sponsored hacking unit; TRM attributes the Binance theft of 29 October 2026 to it with high confidence; Chainalysis CEO Jonathan Levin separately assessed it likely carried it out; the FBI previously attributed the February 2025 Bybit attack to the same group).

    North Korean state-sponsored hacking unit; TRM attributes the Binance theft of 29 October 2026 to it with high confidence; Chainalysis CEO Jonathan Levin separately assessed it likely carried it out; the FBI previously attributed the February 2025 Bybit attack to the same group

  • articleas threat actors2026-10-30It is written here as TraderTraitor (North Korean cybercrime group, attributed by Chainalysis as responsible for the Binance hack of October 29, with a $6.4 billion theft).

    North Korean cybercrime group, attributed by Chainalysis as responsible for the Binance hack of October 29, with a $6.4 billion theft

  • articleas threat actors2026-10-30It is written here as TraderTraitor (North Korean state-backed hacking unit, also tracked as Lazarus Group and APT38; attributed by TRM Labs and confirmed by Chainalysis with "a high degree of confidence"; Binance itself has not linked the incident to a group).

    North Korean state-backed hacking unit, also tracked as Lazarus Group and APT38; attributed by TRM Labs and confirmed by Chainalysis with "a high degree of confidence"; Binance itself has not linked the incident to a group

  • articleas threat actors2026-10-30It is written here as TraderTraitor (North Korea's elite hacking unit; attributed by TRM Labs with high confidence as the Binance attacker, and by the FBI for the Bybit theft).

    North Korea's elite hacking unit; attributed by TRM Labs with high confidence as the Binance attacker, and by the FBI for the Bybit theft

  • articleas threat actors2026-10-30It is written here as TraderTraitor (suspected by TRM Labs with a high degree of confidence; believed to be part of the Lazarus Group; linked to the February 2025 Bybit theft of $1.5 billion).

    suspected by TRM Labs with a high degree of confidence; believed to be part of the Lazarus Group; linked to the February 2025 Bybit theft of $1.5 billion

  • articleas threat actors2026-10-06
  • articleas threat actors2026-10-05
  • articleas threat actors2026-09-25It is written here as TraderTraitor (North Korea-linked).

    Group attributed by AFX to the earlier AFX exploit; onchain researcher Specter linked part of the stolen XRP trail from the Bitget hack to infrastructure connected with that AFX exploit.

  • articleas threat actors

    North Korea's Lazarus-linked unit; attributed by TRM Labs and Chainalysis as the attacker behind the roughly $6.3b Binance theft

  • articleas classification.key entities
  • writeupas threat actors

    TRM Labs links the laundering network handling the Bitget proceeds to one previously used by TraderTraitor, without definitive attribution of the intrusion itself.

All threat actors in this workspace.