Stolen funds from the $6.3B Binance exploit and $388 million Bitget exploit were commingled at the same address, suspected of the same North Korea-linked attacker ZachXBT announced that stolen funds from the $6.3 billion Binance exploit and the $388 million Bitget exploit came through THORChain and were commingled at the same address. ZachXBT stated that this indicates that the same player is likely behind both incidents. The Bitget exploit was previously attributed to the North Korean-linked TraderBugd, which coincided with other previous exploits such as Kelp DAO. According to MistTrack, stolen TRX from the Binance incident flowed through the Bitget Wallet Swap Bridge to an address starting with 0xCd68. A trace on the chain shows that this address was previously used by the Pemex hacker. - Link.

Stolen funds from the $6.3B Binance exploit and $388 million Bitget exploit were commingled at the same address, suspected of the same North Korea-linked attacker ZachXBT announced that stolen funds from the $6.3 billion Binance exploit and the $388 million Bitget exploit came through THORChain and were commingled at the same address. ZachXBT stated that this indicates that the same player is likely behind both incidents. The Bitget exploit was previously attributed to the North Korean-linked TraderBugd, which coincided with other previous exploits such as Kelp DAO. According to MistTrack, stolen TRX from the Binance incident flowed through the Bitget Wallet Swap Bridge to an address starting with 0xCd68. A trace on the chain shows that this address was previously used by the Pemex hacker. - Link.