# ZachXBT Suspects North Korea’s Lazarus Group Behind Binance Attack

By Simon Yoon

Canonical URL: https://www.tokenpost.com/news/technology/44159
Published: 2026-10-30T02:46:31.000Z
Updated: 2026-10-30T02:46:31.000Z
Section: Technology

> Binance estimates the incident's impact at about $6.3 billion and says a compromised DevOps engineer laptop may have been involved.

Blockchain investigator ZachXBT has linked the Binance security incident to North Korea’s Lazarus Group, describing the group’s role in the attack as likely and putting attribution at the center of the breach.

The post identifies a suspected perpetrator but does not confirm responsibility or explain how the breach happened. That leaves the group link as an allegation from ZachXBT, distinct from Binance’s description of possible access and losses.

Binance has put the incident’s estimated impact at about $6.3 billion and said a compromised laptop belonging to a DevOps engineer may have been involved. The exchange also said its SAFU fund and company funds will cover all losses.

First Digital separately froze about 3.4 million FDUSD held by the attacker, adding an asset freeze to the incident response. The two accounts address separate questions: who may be responsible and what Binance says happened.