The FBI, alongside the USSS and IRS-CI, says the stolen funds are being converted primarily into Ethereum, with further laundering expected through DeFi and instant swap services. The bureau attributes the activity to its "TraderTraitor" designation for North Korean cyber operations. Authorities are urging node operators, instant exchanges, DeFi services, and analytics firms to block transactions tied to the listed addresses. The advisory, dated October 31, 2026, includes a long list of ETH addresses said to be operated by or connected to the actors, and directs tips to local FBI offices or ic3.gov.

AI summary of the linked source — not editorial content.

Story signal · how it spread on X · via Elfa

as of
Spread
i
Distinct X and Telegram accounts Elfa counted behind this story’s reports, summed over the thread. Not posts, not impressions.
114 accounts

first post
Leviathan +26.9 h later

BNB reaction
i
Price change from the first post to 24 hours later (Hyperliquid). BTC over the same window is shown so a market-wide move is not mistaken for a reaction to this story. Not advice.
+1.0% 24h after post

$698.53 → $705.76
BTC +0.8% same window

Thread · 6 events · 1 consequence · last update 31 Oct 21:54
  1. First reportTrump reportedly looking into Binance hack28 acc.
  2. UpdateTrump says the Binance hack is being looked into as Binance reports it is under control50 acc.
  3. UpdateTrump comments on reported Binance hack, says exchange is being monitored2 acc.
  4. UpdateTrump says the U.S. is investigating whether North Korean hackers attacked Binance2 acc.
  5. UpdateFBI attributes theft of more than $6 billion in Binance virtual assets to North Korea22 acc.
  6. ConsequenceFBI urges DeFi platforms, including THORSwap, to block transactions tied to Binance exploiters10 acc.
  7. Leviathan published this article

All times UTC.

Cited posts

  • @tradfi tradfi newsFirst reportOn X ↗

    *TRUMP: LOOKING AT BINANCE HACK

  • @AggrNews Aggr NewsOn X ↗

    *TRUMP: LOOKING AT BINANCE HACK: BBG

  • @DankoWeb3 DankoOn X ↗

    BREAKING: TRUMP LOOKING AT BINANCE HACK https://t.co/GmANORfz1b

Show 3 more cited posts
  • @Xfinancebull X Finance BullOn X ↗

    *TRUMP: LOOKING AT BINANCE HACK *TRUMP: LOOKING AT WHETHER BINANCE HACK IS BY NORTH KOREA

  • @alpha_co Alpha coOn X ↗

    President Donald Trump is looking into the Binance hack

  • @DegenerateNews DEGEN NEWSOn X ↗

    BREAKING: TRUMP LOOKING AT @binance HACK

108 more accounts posted about this · 9 Telegram channels (no public link)

TradersTrader calls tracked by Elfa · not advice

Positioning · BNB

Open494 open positions · 453 long · 41 short

Tracked accounts lean long about 97% of the time, so a long-heavy book is normal, not a signal. As of 31 Oct 22:42 UTC.

Reaction since the first post

Since 30 Oct 20:01 UTC16 calls opened · 12 long · 4 short

Whole crypto market, not this story

Crowding1st percentile · vs last 28 days, 50 typical
Pulse 24h16/100 · unusualness of new calls, 0–100, 50 typical, higher means more long than usual
Book96.8% long · 10,777 accounts

As of 31 Oct 22:50 UTC.

Social-monitoring data, not investment advice Elfa prices Hyperliquid post text from Xas of

Explore the topic

Loading related coverage…

Explore the full feed

Comments

Loading comments…