# ZachXBT: Binance and Bitget exploit funds commingled via THORChain

Source: https://x.com/zachxbt/status/2116030284261179538
Kiwi News: https://news.kiwistand.com/stories/ZachXBT-Binance-and-Bitget-exploit-funds-commingled-via-THORChain?index=0x6ae80edcc4d1776c3219026a31801171725387bf31883d67e616a8774efa8577fa29ea1c
Submitted by 0xbBfd...e91B on 2026-11-02 UTC, 1 upvote, 0 comments

## Summary

ZachXBT reports that stolen funds from the $6.3B Binance exploit and the $388M Bitget exploit were commingled at the same address, after arriving via THORChain. The update says this indicates the same actor is likely behind both incidents. The Bitget exploit was attributed to DPRK-linked TraiderTraitor, which the post says overlapped with other previous exploits such as Kelp DAO.

## Article

Update: Stolen funds from the $6.3B Binance exploit and $388M Bitget exploit were commingled at the same address 45 minutes ago, after arriving via THORChain.

This indicates the same actor is likely behind both incidents. 

The Bitget exploit was attributed to DPRK-linked TraiderTraitor, which had overlap with other previous exploits such as Kelp DAO. 

Commingling address:
0x15104a9ce0f08a8f0075a0869ae80e795fe0feb7

Bitget exploit context: https://x.com/zachxbt/status/2104528688469647700