Unchained
Unchained
Laura Shin
How North Korea Stole $6.3 Billion From Binance in 20 Minutes
1 hour 20 minutes Posted Nov 3, 2026 at 5:43 pm.
Intro
Unchained Survey: complete the listener survey at https://unchainedcrypto.com/survey
How North Korea took $6.3 billion from Binance in about 20 minutes
Why the EIP-7702 delegation made the drain faster
Nexo: earn daily interest on your crypto or borrow against your assets at https://unchainedcrypto.com/go/nexo-podcast-yt
Stand With Crypto: see where candidates stand on crypto and make your voting plan at https://unchainedcrypto.com/go/standwithcrypto-yt
Which chains were hit and where exchange signing infrastructure fails
Should Binance have held $6 billion in hot wallets?
Why Circle and Tether moved fast to freeze the stolen funds
How the hackers borrowed nearly 20,000 ETH on Aave
Is Binance liquidity helping launder funds through THORChain?
How decentralized is THORChain after a three-vote halt?
What the FBI naming THOR node operators signals
Why the laundering trail looks machine-driven
Who TraderTraitor is and how fake job interviews hack developers
What the industry should change to stop North Korea
0:00
1:20:36
Download MP3
Show notes
A compromised developer laptop and 50 pre-signed transactions let North Korea drain $6.3 billion from Binance. Jonty and Pablo Sabbatella trace how it happened.
========================================================
Thank you to our sponsor!
Put your crypto to work with Nexo: earn daily interest or borrow funds against your assets on one platform trusted by more than 10 million clients.
Find out more at ⁠⁠⁠⁠⁠⁠https://unchainedcrypto.com/go/nexo-podcast-sn⁠⁠⁠⁠⁠⁠.
Geo-restrictions, eligibility and terms apply.
With Election Day on November 3, crypto voters could make the difference in close races. Check where candidates stand on crypto, verify your registration, and make your voting plan at Stand With Crypto’s Voter Hub.
========================================================
Quick favor: We’re deciding what Unchained does next; new shows, stream times, what’s worth paying for.
Our ⁠listener survey⁠ takes five minutes, it’s anonymous, and I read the write-in answers myself. Everyone who finishes it gets a free month of Premium, Unchained or Bits + Bips, your pick. Open through Sunday, November 8.
— Laura
========================================================
North Korea only needed 20 minutes to take $6.3 billion from Binance in the largest hack in history, not just crypto history. According to Binance, one of the attack vectors started with a compromised developer laptop, which ultimately led to the attackers being able to sign transactions from the exchange's hot wallets.
Jonty, founder of Pangolin Intelligence, and Pablo Sabbatella, founder of Opsek, trace how an EIP-7702 upgrade let the hackers sweep those wallets, why roughly 43% of the funds were frozen compared with less than 3% after Bybit, and how Circle, Tether, Arbitrum's Security Council and Aave responded. They also debate how decentralized THORChain really is, why the FBI named THOR node operators, and how TraderTraitor lures developers with fake job interviews.
With Chainalysis tying nearly 89% of this year's reported hack losses to North Korea, Pablo and Jonty lay out the security and anti-laundering steps the industry could take before the next attack.
Host:
⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Laura Shin⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠, Host / Unchained
Guest:
⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Jonty (tanuki42) - Founder of Pangolin Intelligence
⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Pablo Sabbatella - Founder of Opsek
Timestamps
🎬
📋
🚨
🔑
💰
🗳️
⛓️
🏦
🧊
🏛️
🔄
⚖️
🚔
🤖
🕵️
🛡️
Learn more about your ad choices. Visit megaphone.fm/adchoices