SlowMist Cosine: Binance Hacker Funds Linked to Addresses Associated with Phemex North Korean Hackers

on October 30, according to SlowMist's Cosine, the fund flows used by hackers in the Binance attack incident have been linked to wallet addresses associated with the hackers in the Phemex theft incident at the beginning of 2025. Cos stated that after his team investigated the Phemex theft incident, they confirmed the attackers were North Korean hackers.