The FBI attributed the $6.43 billion Binance hot-wallet theft to North Korea's TraderTraitor activity after attackers used a fake job interview and malicious coding assignment to compromise an engineer, pivot through internal systems, and abuse Binance's wallet-signing service. Signed EIP-7702 authorizations delegated control of Binance 14 to an attacker-operated sweeper for nearly four hours, while separate validly signed transactions drained assets across Bitcoin, XRP, Solana, Optimism, Arbitrum, Avalanche, and other networks. Issuers and responders froze or intercepted about $2.85 billion, but roughly $3.35 billion remained in theft-linked addresses as of November 5, and Binance had not fully explained how stolen deployment access translated into signing authority across chains.