Multiple cybersecurity research firms and investigators, including TRM Labs, Chainalysis, and ZachXBT, have linked the Binance hack to the North Korea-affiliated actor 'TraderTraitor' with high confidence. The attribution is based on the technical sophistication of the attack and the observation that stolen funds from both Binance and a previous Bitget exploit were commingled at identical onchain addresses after being laundered through the cross-chain protocol THORChain.