October 30, 2026Crypto·Bearish·crypto security
TRM Labs and ZachXBT say Binance and Bitget hack funds commingled at same address, indicating same North Korea-linked actor behind Bybit too
TRM Labs and on-chain investigator ZachXBT say funds from the $6.3B Binance exploit and the $388M Bitget exploit were commingled at the same address after arriving via THORChain, indicating the same actor is likely behind both. Lookonchain says the $1.5B Bybit hack may also be linked to North Korea's Lazarus Group.
Detected & updated continuously · Source: Nebula
Story subjects