# TRM Attributes $6.36 Billion in Binance Transfers to TraderTraitor

By Simon Yoon

Canonical URL: https://www.tokenpost.com/news/technology/44589
Published: 2026-10-30T11:15:26.000Z
Updated: 2026-10-30T11:15:26.000Z
Section: Technology

> Binance estimated the incident's impact at about $6.3 billion and said roughly $3 billion in affected assets had been frozen on-chain.

TRM Labs attributed about $6.36 billion in transfers from Binance wallets to TraderTraitor, a North Korean hacking unit, while Binance's incident update did not name an attacker.

The transfers crossed 10 blockchains, mostly within about 20 minutes beginning at 4:05 p.m. ET Oct. 29 (20:05 UTC). The affected networks were Ethereum, Bitcoin, Tron, XRP Ledger, Solana, Arbitrum, Avalanche, Optimism, Base and Polygon; BNB Chain was not among them.

Binance's initial investigation suggested a compromised DevOps engineer's laptop may have enabled unauthorized withdrawals. The company said it found no evidence of a wallet private-key leak.

Binance estimated the incident's impact at about $6.3 billion and said roughly $3 billion in affected assets had been frozen on-chain as of its update, posted at 10:23 p.m. ET Oct. 29 (2:23 a.m. UTC Oct. 30). It said it had temporarily suspended deposits and withdrawals and would cover losses with its SAFU fund and company funds. The transfer estimate and impact estimate describe different measures and do not establish a final net loss.