TREE NEWS reports: North Korean hacking group TraderTraitor spent about eight weeks inside Binance before the October 29 theft of roughly $6.4 billion, Security Alliance (SEAL) said, noting the disclosed details match the group’s “shell company plus multiple interview rounds” playbook. SEAL said TraderTraitor is distinct from the recruiting-lure Contagious Interview group and has also breached LayerZero, AFX and possibly Bitget, dwelling three to six weeks inside those organizations.
SEAL: North Korea’s TraderTraitor lurked inside Binance for about 8 weeks before $6.4B breach
The eight-week dwell time is the real headline here: it reframes exchange security from perimeter defense to insider-risk and HR vetting, since SEAL's cited playbook runs through shell companies and staged interviews rather than code exploits. The naming of LayerZero, AFX and possibly Bitget as earlier targets suggests a sustained campaign against crypto infrastructure rather than a single incident, which matters for counterparties assessing operational exposure across the sector. Whether the disclosed Binance details prompt other exchanges to re-examine hiring pipelines and third-party access is the open question to watch.
Generated by AI for reference only.
Share on WeChat
Open WeChat → Scan → then tap "…" to send to a chat or Moments.
Tap "…" in the top-right corner to send to a chat or share to Moments.