ZachXBT said funds linked to the reported Binance and Bitget exploits were commingled at the same address after moving through THORChain, an on-chain pattern he said suggests the same actor may be behind both incidents.
On-chain assessment
The on-chain investigator described roughly $6.3 billion in stolen Binance funds and $388 million in stolen Bitget funds, citing transfers into the same address. He also said the Bitget exploit had previously been attributed to the DPRK-linked TraiderTraitor group. These are ZachXBT’s assessments and remain independently unverified.
Source: ZachXBT post mirror (original X link) and BlockBeats report, published October 30, 2026 (China time).