North Korean hackers spent 8 weeks inside Binance
According to SEAL Intel, TraderTraitor was behind the $6.4B USD hack. It was not the Contagious Interview group, and the intrusion could have been detected before the theft.

SEAL Intel attributes the $6.4B Binance hack to TraderTraitor, not the Contagious Interview group, warning that threat models tuned for the latter will fail. The author says the intrusion lasted roughly eight weeks and could have been detected beforehand. TraderTraitor, also called Jade Sleet and UNC4899, ran three clusters in 2026: malicious Terraform providers (LayerZero), front companies with GitLab repos exploiting CVE-2025-48384, and a suspected 0-day intrusion at Bitget with 24 days of dwell time. Dwell times ranged from three to eight weeks across incidents.

✨ AI summary of the linked source — not editorial content.

Explore the topic

• Hacks
• Interview
• Binance
• North Korea