In remarks about Binance’s Oct. 29 hot-wallet incident, Ilya Lichtenstein discussed techniques associated with North Korean hackers but did not identify an attacker.
He said an intruder might seek access to an exchange through an employee’s account. That method was not confirmed in Binance’s incident, and Lichtenstein’s comments did not establish how attackers entered the exchange’s systems.
He also said asset tracing is especially time-sensitive in the first 48 hours after an attack.
Separately, the Federal Bureau of Investigation (FBI) attributed the theft of more than $6 billion in virtual assets from Binance to North Korea and named the activity TraderTraitor. The FBI’s Binance attribution is distinct from Lichtenstein’s comparison of tactics.
Binance has pledged to cover the losses through its Secure Asset Fund for Users and company funds, without specifying how the sources would be divided.
