BreakingCoinTelegraph
North Korea linked to $6.3B Binance hack by crypto investigators
TRM Labs says it has high confidence in the attribution, while ZachXBT identified stolen funds from the Binance and Bitget hacks converging at the same address.
- #Hack
More flash news
View allStandard Chartered Analyst: Binance Hack Incident May Accelerate DEX Adoption and Benefit UNI
Geoffrey Kendrick, Global Head of Digital Asset Research at Standard Chartered, states that the Binance hack incident may accelerate the shift toward decentralized exchanges (DEX) and be favorable for Uniswap (UNI). Kendrick also notes that his previous target of $100 for UNI by 2030 may be conservative.
Upbit to Delist BLUR on November 30
According to official announcements, South Korean cryptocurrency exchange Upbit will terminate trading support for BLUR. The decision is made after comprehensive consideration that the asset has deficiencies in aspects such as business authenticity and sustainability, and may cause losses to users. Upbit designated BLUR as a trading watchlist project on October 13, 2026, and subsequent reviews confirmed that the grounds for this designation have not been resolved. Trading will be terminated at 15:00 on November 30, 2026, and withdrawal support will cease on December 30, 2026.
Trader 58bro.eth offloads 8000 ETH in the past hour to repay loans
On-chain data shows trader 58bro.eth (@0x58bro) sold 8000 ETH over the past hour. The user withdrew over $17.96 million worth of ETH from Aave, then deposited the funds to OKX in batches, and has now withdrawn 10.5 million USDT to repay outstanding loans. 4911.05 WETH remains staked as collateral on Aave, against which 2.51 million USDT has been borrowed, with a current health factor of 3.69.
Binance Discloses Details of Security Incident: Compromised Employee Computer Served as Attack Entry Point, User Funds Remain Secure
In response to the recent security incident, Binance has officially released relevant technical details and current handling progress. <p>The initial entry point of this attack was the compromise of an employee's computer. The attacker did not directly obtain engineer privileges to complete fund transfers. The attacker employed multi-stage complex infiltration tactics, and this security incident was not caused by the actions of a single individual. The ongoing investigation has not yet attributed responsibility for the incident to any internal personnel.</p><p>At this stage, the platform has found no evidence of wallet private key leaks, and all user funds remain in a secure state. All stolen losses arising from this incident will be fully covered by Binance's SAFU Fund and the company's own capital, and no losses will be borne by regular users.</p><p>Approximately $3 billion of affected related on-chain assets have been successfully frozen. The platform is concurrently cooperating with law enforcement agencies and blockchain intelligence organizations to conduct follow-up investigations into the attackers. Deposit services on the platform remain fully operational at present. Withdrawals have been temporarily suspended as a precautionary security measure, and are expected to resume within 48 hours.</p>
OneKey Founder: IBIT May Have Become a Potential Target of North Korean Hackers, Its Highly Centralized BTC Custody Risks Cannot Be Ignored
OneKey founder Yishi analyzed that he suspects IBIT is already on North Korea's list of potential targets. During the Bybit hacking incident in February 2025, attackers infiltrated the Safe{Wallet} developer's Mac computer through a malicious project disguised as a legitimate Docker tool, gaining 17 days of access — sufficient to manipulate the transaction interface used by signers, tricking them into authorizing the theft of $1.5 billion without their knowledge. Yishi noted that TRM Labs is highly confident that the Binance incident is linked to TraderTraitor, a group also associated with the Bybit and DMM Bitcoin heists; Binance stated there is no evidence of private key leaks, while TRM believes the attackers may have gained control of the signing infrastructure.
