That direct on-chain link strengthened our assessment that TraderTraitor carried out the Binance hack and we announced it on October 30, 12:30am Eastern Time.
Chainalysis said it announced its attribution to TraderTraitor on October 30 at 12:30 a.m. Eastern Time.
This line is our short summary of the quote below. The quote is the evidence.
On the timeline
Other statements from the same source
Chainalysis said its strongest evidence for TraderTraitor was seeing Binance funds commingle in real time with funds stolen in the Bitget exploit.
The strongest evidence emerged when Chainalysis investigators observed, in real time, funds stolen from Binance commingling with funds stolen in last month’s Bitget exploit, which had been attributed to North Korean actors.
Chainalysis said that this repeated sequence suggests a programmatic process for moving and redistributing the stolen funds.
This repeated sequence suggests a programmatic process for moving and redistributing the stolen funds.
Chainalysis said many addresses receive exactly 1 TRX, then additional funds, then forward the funds, which it said suggests a programmatic process.
Many addresses follow a consistent pattern: they receive exactly 1 TRX, then receive additional funds, then forward funds to other addresses.
Chainalysis said the attacker swapped $325 million in stablecoins into $285 million in ETH over nearly 20 minutes to try to stay ahead of the freezes.
Over nearly 20 minutes it swapped $325 million in stablecoins into $285 million in ETH.
Chainalysis said approximately $2.8 billion had been frozen so far.
Approximately $2.8 billion has been frozen so far.