SlowMist: Binance attacker may be North Korean group Lazarus Group

October 30: SlowMist posted on social media stating that it has detected that during the money laundering process by the Binance hacker, the stolen TRX was transferred through Bitget Wallet's cross-chain bridge, and the destination address had previously been used by the Phemex hacker.

It is worth noting that the Phemex hacker is also the hacker in the Bybit attack incident, namely the North Korean organization Lazarus Group.