Binance hacker transfers $38 million via Relay cross-chain in 7 hours, KYT mechanism faces scrutiny.

US President Donald Trump has repeatedly stated publicly recently that he gets along well with North Korean leader Kim Jong Un, emphasizing that maintaining good relations with nuclear-armed countries is a wise move. This approach aligns with his summit diplomacy toward North Korea during his first term and matches his current second-term preference for keeping communication channels open with leaders of nuclear-armed states. Trump responded to the Binance hack incident today, noting it is currently unclear whether the attack on Binance was carried out by North Korea. If a link to North Korea is ultimately confirmed, the U.S. will engage with Pyongyang. However, the FBI previously issued a statement formally attributing the October 29, 2026 Binance security breach to North Korea, with the virtual assets involved valued at over $60 billion. The FBI has named this North Korean malicious cyber operation "TraderTraitor". If the U.S. pursues negotiations, possible steps include using third parties, intelligence channels, or public pressure to demand the freezing or return of the assets. Trump’s past approach to North Korea has leaned toward "direct communication + personal relations"—whether this will hold in this case remains to be seen. Binance’s connections to Trump family-related businesses (such as stablecoins) may also lead the White House to pay closer attention to the case. Meanwhile, the outlook for a formal U.S.-North Korea summit remains uncertain: Trump previously expressed a desire to meet within the year, but that has cooled recently, and North Korea has not responded actively. If the FBI’s attribution is confirmed and the stolen funds are used for nuclear weapons or missile programs (the U.S. has long accused North Korean hackers of funding its weapons programs), this could become a new issue or friction point in U.S.-North Korea communications.

THORChain co-founder Chad Barraford stated in a post that all information held by THORNode operators is public and accessible in real time, meaning law enforcement does not need to obtain such information via subpoenas. He noted this is the ideal scenario for investigations. Previously, the FBI, U.S. Secret Service (USSS), and Criminal Investigation Division of the U.S. Internal Revenue Service (IRS-CI) called on THORNode operators, RPC node operators, instant swap platforms, and DeFi service providers to block transactions involving addresses linked to North Korean hacker group TraderTraitor, as well as fund flows originating from these addresses. The request is tied to the $6 billion+ Binance asset theft incident.

Chainalysis stated in a recent publication that THORChain’s operations were disrupted by an Ethereum chain reorganization incident, which delayed the money laundering process for stolen funds from the Binance hack. The chain reorganization led THORChain to incorrectly issue duplicate refunds to a user who had deposited 10 ETH, triggering an emergency protocol pause that temporarily blocked all cross-chain swaps for all users—including money launderers associated with the North Korean hacking group. Chainalysis noted that prior to THORChain’s service resumption, attackers and other users were unable to perform swaps via most of its cross-chain bridges. Earlier, the U.S. Federal Bureau of Investigation (FBI), U.S. Secret Service (USSS), and IRS Criminal Investigation (IRS-CI) jointly called on THORNode operators, RPC node operators, instant swap platforms, DeFi service providers, and other virtual asset service providers to block transactions with addresses linked to the Binance hack, as well as fund flows originating from these addresses. The announcement also disclosed wallet addresses directly or closely tied to the relevant North Korean hacking activities.

According to monitoring by an AI analytics tool, a VVV whale with a cost basis as low as $3.77 has deposited tokens to Coinbase after a 19-day gap. The address transferred 100,000 VVV tokens roughly 3 hours ago, valued at around $2.32 million. Data shows that since June 2026, this address has deposited a total of 663,374 VVV tokens to the exchange, with an average cost of approximately $21.53. If all these tokens were sold, total profit would be around $11.786 million, representing a return of roughly 471.2%. Since June 2026, the address has reportedly offloaded VVV tokens worth about $14.28 million, though on-chain deposit activity does not directly confirm the tokens have actually been sold.

US Secretary of State Rubio said at a Saturday press conference that US President Trump has not decided whether to resume military operations against Iran. Rubio added he is unaware of a specific timeline for Qatar-led talks aimed at resolving US-Iran hostilities. Reuters reported earlier Saturday that Iranian officials are holding talks with Qatari mediators in Doha. (Source: Jinshi)

Iran’s Supreme National Security Council Secretary Rezaei said local time on October 31 that he has read a letter from U.S. Vice President Vance but has not yet responded. He noted the tone of the U.S. letter has shifted significantly, calling it a good sign that the Iranian people have consolidated their victory and authority. Rezaei added that since the letter contains no specific details, he will not make further comments on it at this time.