North Korea linked to massive Binance crypto heist
The Vergeby Terrence O’Brien
Context: The FBI says North Korea was behind the $6.3 billion Binance heist of October 29th; Bloomberg reports Binance ran a global war room of about 100 people to contain it.
From The Verge: The FBI says North Korea was behind the massive $6.3 billion crypto heist that hit Binance on October 29th. The FBI labeled the activity "TraderTraitor" and said that it had observed actors it has connected to hack converting the tokens to Ethereum and preparing for further laundering of the funds.
THORChain, which handled ~$1B of stolen Bybit funds in 2025 for $12M+ in fees, began moving the Binance loot despite FBI pleas, saying it can't stop transfers — Some crypto developers say they can't stop North Korean hackers from laundering stolen funds through their platforms, frustrating law…
Binance's postmortem says the attack began in June when a developer downloaded a tampered installer, and combined fake job interviews with an internal AI tool.
Hackers have stolen about $6.3 billion worth of digital assets from Binance, a major cryptocurrency exchange operator. The heist is more than four times bigger than the previous largest crypto theft.
Binance “temporarily suspended” all deposits and withdrawals as it investigates security issues and works with law enforcement; Binance.US says it's unaffected — Tether and Circle freeze billions of dollars' worth of their coins as world's largest crypto exchange investigates security issue
Made this because I'm curious if anyone out there has figured out how to actually use this PHP RCE we spent the last few days panicking over. Have fun!