Chainalysis attributes the $6.4 billion Binance theft to North Korean cybercrime group TraderTraitor, with its strongest evidence coming from stolen Binance funds commingling on-chain with assets from the DPRK-attributed Bitget exploit. The attackers rapidly converted stablecoins into non-freezable assets and used thousands of repetitive transactions that indicated automated laundering. Stablecoin issuers, investigators, law enforcement, and industry partners had frozen approximately $2.8 billion by publication time.