Bitcoin addresses linked to the Binance hackers receive microtransactions and messages after $6 billion theft

People have started sending tiny Bitcoin transfers and OP_RETURN notes to the 19 blockchain addresses公开ed as tied to the hackers behind Binance’s theft of 18,270 BTC. For payment companies and crypto operators, the only interesting part here is not the graffiti-style messages — it is how quickly a major breach turns into on-chain tracing, attribution attempts, and operational noise.

1. Mempool shows that the 19 addresses have begun receiving small Bitcoin payments of less than $1, each paired with short personal notes using Bitcoin’s built-in OP_RETURN function. One sender repeated the same line, Help me bro, across all 19 wallets three times, sending roughly 1000 satoshis ($0.78) each time.
2. That sender spent a total of $46, excluding transaction fees. Another unknown address urged the hackers to move the stolen funds through THORChain swap services, told them never to return the money to Binance founder Changpeng Zhao, wished them success, and said they deserved the funds stolen from Binance.
3. A third message told the hackers not to agree to a white-hat deal — meaning not to negotiate the return of stolen funds in exchange for a bounty or reward. According to Mempool specialists, the hackers did not reply to any of the messages.
4. The attack on Binance, described as the world’s largest crypto exchange, took place overnight on 29-30 October. Binance estimated the damage at more than $6 billion and said about 44% of the stolen assets were frozen. Preliminary findings say the attackers gained access through the personal laptop of one DevOps engineer, which let them enter a service container and trigger an unauthorized withdrawal.
5. The FBI and blockchain analysts linked the breach to North Korean hackers. Kim Yo Jong, sister of North Korean leader Kim Jong Un, called those allegations absurd.