Binance blocks 57 suspected North Korea-linked cyber threats in 2026

Co-CEO Yi He disclosed the figure in an incident report that followed a major October breach tied to the TraderTraitor group Binance says its security team stopped 57 suspected North Korea-linked cyber threats over the course of 2026. Co-CEO Yi He shared the figure on November 3. The timing is awkward. The number surfaced in a detailed incident report published after a breach on October 29, one that reportedly took approximately $6.34 billion in digital assets from the exchange. So the scoreboard reads 57 attempts blocked and one that got through. In this line of work, a single miss can carry a ten-figure price tag. What Binance disclosed The report lays out how the attackers tried to get in. The playbook leaned on people as much as on code. Tactics cited included social engineering, tampered software packages, and fake job interviews. The goal in each case was the same: obtain unauthorized access to sensitive information and plant malware on internal systems. Binance attributed the October 29 incident to North Korea’s TraderTraitor group. The FBI and blockchain analytics firms have also linked the theft to the same unit, according to the research findings. TraderTraitor is not a n...