Federal agencies released major findings on the record Binance theft. On November 1, 2026, officials blamed North Korean hackers. The FBI, Secret Service, and tax investigators issued a joint warning. They acted together to warn the public.
They named the state-backed group TraderTraitor as the culprit. This group is also known as Lazarus Group. It is also known as APT38 and BlueNoroff. Cyber experts say the group steals digital coins to fund weapons programs.
The FBI published a list of flagged wallet addresses. The alert named 608 Ethereum wallets. It also listed 19 Bitcoin addresses and one Solana address. These wallets hold stolen digital cash.
Investigators urged crypto bridges and node operators to block these wallets. They want cross-chain networks to stop stolen money from moving. Quick blocks can freeze stolen funds.
Meanwhile, onchain detectives tracked the stolen funds in real time. Analyst SomaXBT shared detailed tracking data on social media. The data shows the hackers laundered 242 million dollars on the Tron network. They moved this huge sum in just two days.
The thieves took 628 million dollars from Binance. They moved the money onto Tron. Tether acted quickly to freeze 378 million dollars in stablecoins. That freeze left 249 million dollars to move.
The hackers pushed those funds through cross-chain bridges. Different bridges carried the money off Tron.
The Relay bridge carried forty-eight million dollars. THORChain moved forty-four million dollars. Chainflip handled thirty-two million dollars. Symbiosis processed sixteen million dollars. Together, these tools moved about 140 million dollars into other coins. Bitget Wallet routing handled another 41 million dollars.
The hackers also targeted Solana assets. On Sunday, they moved 486,000 Solana coins through Relay. They swapped those coins for bitcoin. That trade moved another 46 million dollars off the network.
The hackers swapped the stolen coins into ether and bitcoin. At THORChain, the high volume caused technical trouble. A blockchain glitch caused the bridge to double-refund a deposit. That glitch triggered an emergency halt. THORChain paused trading across ten different blockchains. The pause stopped
trades in their tracks.
Other bridge protocols are trying to plug security holes. The team behind Symbiosis said its screening tools had gaps. The firm is working with Binance to block the stolen assets. Teams want to stop future leaks.
Analytics firm Elliptic confirmed that 2.85 billion dollars has been frozen so far. Most of the frozen funds are stablecoins like USDT and USDC.
However, over three billion dollars sits in assets that cannot be frozen. That sum includes more than 18,000 bitcoins and 233 million XRP. Unfreezable coins give thieves more room to move.
Experts at Elliptic studied the money patterns. They found that automated scripts ran day and night. The scripts sent money every hour for 31 hours straight. Human operators directed the scripts to test different bridges.
The hackers tried many routes to move cash. When one bridge blocked a deposit, the script tried another. The tools worked with fast speed. The thieves moved coins without taking breaks.
This incident shows the growing reach of state-sponsored cyber gangs. Hackers use automated computer scripts to move coins across chains. They test multiple tools until they find an open path.
Industry teams must cooperate to stop illicit cash flows. Node operators and bridge developers need faster tools to freeze stolen funds. Better alerts help protect the wider digital economy from cyber crime.
Safe tools keep digital assets out of reach from thieves. Sound habits protect your coins for years to come. Always keep your secret keys stored safely offline. Never leave large amounts on web bridges. Security takes extra care, but it keeps your digital wealth secure. Taking simple steps keeps your money safe. Safe habits protect your future wealth.
Disclaimer: Aadi Crypto provides this information for educational and informational purposes only. It does not constitute financial, investment, trading, or other professional advice. Always do your own research and consider your own circumstances before making any financial decision.