SlowMist Cos: Binance hacker funds linked to North Korean hacker-associated addresses from Phemex incident

According to a TechFlow report on October 30, SlowMist Cos said that the fund flows of hackers in the Binance attack have been linked to hacker-associated wallet addresses from the Phemex theft in early 2025. Cos said his team investigated the Phemex theft at the time and confirmed that the attackers were North Korean hackers.

Source: TechFlow