Select what genuinely interests you. Your picks feed directly into our editorial planning. How the evening played out in the market is in our timeline with live ticker, the first report in our Binance hack story. TRM Labs bases the attribution on its own on-chain data and intelligence from outside the blockchain. The pattern matches two earlier attacks: the $1.5 billion hack of the exchange Bybit in February 2025, which the FBI attributed to TraderTraitor, and the attack on KelpDAO in April 2026. In all three cases the attacker's wallet was funded in advance through the mixer Tornado Cash, and the required signatures had been collected before any money moved.