NSA Intelligence · Weekly editionCrypto narratives on X, rankedPrice: 0 gwei · Not financial advice
by NSA Intelligence. Never sidelined again.
← Week of Oct 25

Narrative / Rank 03 / Week of Oct 25 – Oct 31

North Korea named by FBI as culprit in $6.3B Binance hack, the largest in history

By NSA Intelligence · Report published

steadynorthkorea
Peak / day33tracked accounts
Peak dayFriOct 30 · busiest day in the panel
Rest of X / peak day129distinct accounts outside the panel
Cited claims20source links retained
Market—no token attached

Attention

Who was talking, day by day

Oct 25 – Oct 31 UTC
Tracked paneldistinct tracked accounts / day
1
1
3
1
7
33
19
Rest of Xdistinct other accounts / day
69
107
125
115
125
129
122

What happened

North Korea launched a suspected ballistic missile and moved self-propelled artillery toward the South Korean border. Separately, South Korea faced a series of AI-driven hacks targeting banks and financial firms, with Daishin Securities reporting a leak of 38,490 customers' data. In crypto, North Korea was accused by CNN and the FBI of the $6.3 billion Binance hack on October 29, 2026, the largest in history, with stolen ETH being laundered via DeFi. A post claimed most stolen USDT was frozen. Discord announced that public server messages will become searchable on Google from mid-December, with opt-out settings.

Why it matters

The Binance hack is the largest in crypto history and directly implicates a nation-state, affecting exchange security and regulatory responses. The AI hacking wave in South Korea demonstrates the growing threat of AI-powered cyberattacks on financial institutions. Discord's indexing change affects user privacy across the crypto community, especially in regions where it's off by default.

Observed reaction

negative

Spread

Where it started and who carried it

First seen
Oct 25, 11:20 UTC by @aibullwifnps1
Accounts
67 tracked · 162 elsewhere on X
Communities
general ct (16), memecoins solana (12), bitcoin (8), nft culture (8)
Key accounts
@watcherguru, @josh_hodlin, @blockstargram, @satoshilambo, @zapmethod

Explainability

Evidence register

Every claim links to the posts behind it
01

North Korea was responsible for a $6.3 billion hack of Binance on or about October 29, 2026, described as the largest heist in human history.

[1][2][3][4][5][6]
02

CNN reported North Korea was responsible for the Binance hack, initially citing a $6 billion figure.

[1]
03

The FBI confirmed North Korea was behind the Binance hack and named the activity 'TraderTraitor'.

[1][2][3]
04

The FBI reported the theft occurred on or about October 29, 2026, and that stolen assets were being converted primarily into Ethereum (ETH).

[1]
05

A post claimed most of the stolen USDT was frozen and the operation was turning into a failed mission.

[1]
06

A post claimed North Korea stated that international sanctions do not work, one day after the Binance hack.

[1]
07

A post claimed North Korea launched a suspected ballistic missile.

[1]
08

A post claimed North Korea moved self-propelled artillery toward the South Korean border, with 122-mm howitzers aimed south.

[1]
09

Discord will begin making messages from Discoverable public servers searchable on Google and other search engines from mid-December, with the feature ON by default in most regions.

[1]
10

In the EU, UK, Canada, Brazil, Australia and South Korea, the Discord search indexing feature will be OFF by default.

[1]
11

Discord users can opt out via User Settings → Data & Privacy → turn off 'Show my message content from Discoverable channels on web pages.'

[1]
12

Private servers, DMs and group DMs are not included in Discord search indexing, and usernames and avatars won't appear alongside indexed messages.

[1]
13

A post claimed hackers used a Chinese AI tool to break into at least 7 financial firms in South Korea, with 68,000 people's data stolen and 16 firms breached by mid-October.

[1][2]
14

A post claimed Daishin Securities reported 38,490 customers' data leaked, including bank account numbers.

[1][2]
15

A post claimed South Korea had at least 9 banks hit by hackers since late September, with police opening a probe and the president ordering a probe into leaks across the whole finance industry.

[1][2]
16

A post claimed Shinhan Bank lost personal data of about 25,000 customers, with the suspect being one 26-year-old with an AI hacking bot.

[1][2]
17

A post claimed 16 banks, crypto firms and payment companies were breached in one AI hacking wave, with about 100,000 personal records leaked.

[1][2]
18

A post claimed one gang ran AI agents built on Claude, Grok and Kimi against 400+ targets in Latin America, including banks and payment firms.

[1][2]
19

A post claimed hackers hitting 7 countries simultaneously, with Latin America's gang targeting 400+ organizations.

[1][2]
20

A post claimed North Korea was previously accused by the FBI of the $1.5 billion Bybit attack last year and the 2022 theft of $620 million in cryptocurrency, and is now responsible for both the first and second largest crypto hacks in history.

[1]

Angles

    Formats in use

    • text

    Risks

    • Paid promotion risk: Watch for coordinated shilling of security tokens or AI tools amid the AI hacking wave narrative.
    • Verification risk: The Binance hack is attributed to North Korea by FBI and CNN, but the claim about USDT being frozen and Kim Jong Un's reaction is unverified and should be flagged as such.
    • Harassment risk: Avoid amplifying posts mocking North Korea's leadership, as it could be seen as harassment of individuals.
    • Financial advice risk: Do not suggest buying or selling any assets based on the hack or market impact.

    Observed content

    Most-engaged posts

    8 posts on X
    JO@josh_hodlin71.3K likes
    RT @Pirat_Nation: Discord is about to put your public messages on Google Discord will start making messages from Discoverable public servers searchable on Google and other search engines from mid-December. The feature is ON by default in most regions, but you can opt out: User
    Open on X →
    BL@blockstargram40.4K likes
    RT @WatcherGuru: JUST IN: 🇰🇵 North Korea's $6,300,000,000 Binance crypto hack is the largest heist in human history. https://t.co/6MQu8AkYAa
    Open on X →
    SA@satoshilambo37.2K likes
    RT @WatcherGuru: JUST IN: 🇰🇵 North Korea responsible for $6 billion Binance hack, CNN reports. https://t.co/nRHzV6xHV1
    Open on X →
    LI@litecointa23.6K likes
    RT @WatcherGuru: BREAKING: 🇺🇸🇰🇵 FBI confirms North Korea is responsible for the $6,300,000,000 Binance crypto hack. https://t.co/VGlNcWF5zq
    Open on X →
    BS@bsvdrip17.2K likes
    RT @JPN_PMO: [Emergency alert] North Korea has launched a suspected ballistic missile. More updates to follow.
    Open on X →
    CR@cryptos6_bk10x13.3K likes
    RT @FBICyberBranch: The FBI is releasing information advising the Democratic People's Republic of Korea (North Korea) was responsible for the theft of more than $6 billion USD in virtual assets from cryptocurrency exchange, Binance, on or about October 29, 2026. The FBI refers to
    Open on X →
    JO@josh_hodlin15.1K likes
    RT @WatcherGuru: JUST IN: 🇰🇵 North Korea says international sanctions do not work. The statement comes just one day after North Korea's $6.3 billion Binance crypto hack, the largest heist in human history.
    Open on X →
    GA@gamergeniegg13.6K likes
    RT @lcamtuf: Crypto dude: "I need cryptocurrency so that the government can't take my money" North Korea: *yoink* Crypto dude: https://t.co/SBdYcNXG8b
    Open on X →

    History

    Weeks this story made the report

    1 week
    1. #3steadyNorth Korea named by FBI as culprit in $6.3B Binance hack, the largest in history