{
  "type": "bundle",
  "id": "bundle--a212da80-a4e2-5a6e-8395-233cdb1f9cb8",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--ca0043ec-ed0a-5e27-8de0-61bfc034f176",
      "created": "2026-11-02T14:09:49.700573+00:00",
      "modified": "2026-11-02T14:09:49.700573+00:00",
      "x_ally_original_id": "org:c13a96f0-939e-4ac8-b39e-24f76e3d8628",
      "name": "Binance",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--1f42aa62-df0e-538a-84d6-43ec46e38e7c",
      "created": "2026-11-02T14:09:49.700573+00:00",
      "modified": "2026-11-02T14:09:49.700573+00:00",
      "x_ally_original_id": "inc:34106c24-dfb0-4a57-b1ff-76e16bbeff77",
      "name": "Binance virtual-asset theft"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--37da5733-c5ae-5605-8edc-e8f524b61d72",
      "created": "2026-11-02T14:09:49.700573+00:00",
      "modified": "2026-11-02T14:09:49.700573+00:00",
      "x_ally_original_id": "brh:b25d7fd4-b93f-4033-94f8-8d21089711a7",
      "name": "Binance virtual-asset theft"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--0347f7c9-dcf0-5c7b-89a2-b4825f2278d7",
      "created": "2026-11-02T14:09:49.700573+00:00",
      "modified": "2026-11-02T14:09:49.700573+00:00",
      "x_ally_original_id": "clm:ff4f2522-12f0-4257-b979-86ca9d936e56",
      "relationship_type": "affected-organization",
      "source_ref": "incident--1f42aa62-df0e-538a-84d6-43ec46e38e7c",
      "target_ref": "identity--ca0043ec-ed0a-5e27-8de0-61bfc034f176",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Federal Bureau of Investigation",
          "url": "https://www.fbi.gov/investigate/cyber/alerts/2026/north-korea-responsible-for-6-billion-binance-attack",
          "external_id": "cit:4b067cb8-7dc1-442f-ac1e-8bf4a367213e",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5b7b456fb35f7ef52a1b64746e8a7331dc80482885a3c602ec637f4097bc2b58"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--477d14fc-92b3-51a9-88a2-aaec5550925c",
      "created": "2026-11-02T14:09:49.700573+00:00",
      "modified": "2026-11-02T14:09:49.700573+00:00",
      "x_ally_original_id": "clm:8f9f20d1-07fb-4d2b-835d-8191e9c23157",
      "relationship_type": "attributed-to",
      "source_ref": "incident--1f42aa62-df0e-538a-84d6-43ec46e38e7c",
      "target_ref": "x-ally-threat-actor--92ec2690-e834-5555-8d25-f8260c8ae731",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Federal Bureau of Investigation",
          "url": "https://www.fbi.gov/investigate/cyber/alerts/2026/north-korea-responsible-for-6-billion-binance-attack",
          "external_id": "cit:4bc0d6f2-1536-44b1-9736-172cc9cc241c",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5b7b456fb35f7ef52a1b64746e8a7331dc80482885a3c602ec637f4097bc2b58"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--bc9b4659-6756-5183-8b48-c7e8e005c796",
      "created": "2026-11-02T14:09:49.700573+00:00",
      "modified": "2026-11-02T14:09:49.700573+00:00",
      "x_ally_original_id": "clm:4cb1719c-c860-4ca9-b293-3a464822b790",
      "relationship_type": "resulted-in",
      "source_ref": "incident--1f42aa62-df0e-538a-84d6-43ec46e38e7c",
      "target_ref": "x-ally-event--9b819fed-828d-5818-819b-f083a9c966aa",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Federal Bureau of Investigation",
          "url": "https://www.fbi.gov/investigate/cyber/alerts/2026/north-korea-responsible-for-6-billion-binance-attack",
          "external_id": "cit:09e7b2c1-cf0e-418b-9340-1e0869aba066",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5b7b456fb35f7ef52a1b64746e8a7331dc80482885a3c602ec637f4097bc2b58"
        }
      ]
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--034cbb76-e161-58f9-8241-0881590fd60a",
      "created": "2026-11-02T14:09:49.700573+00:00",
      "modified": "2026-11-02T14:09:49.700573+00:00",
      "x_ally_original_id": "clm:c1fa00cb-85c2-447d-94cf-4e05a9000f2b",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Federal Bureau of Investigation",
          "url": "https://www.fbi.gov/investigate/cyber/alerts/2026/north-korea-responsible-for-6-billion-binance-attack",
          "external_id": "cit:42dee683-a864-4ff2-bfac-bf8d5ea58064",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5b7b456fb35f7ef52a1b64746e8a7331dc80482885a3c602ec637f4097bc2b58"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The agencies expected further laundering through decentralized-finance and instant-swap services; the advisory presents that stage as an expectation, not an observed completed event."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--2c978b29-d900-5c84-8e8c-2dad5f24aaef",
      "created": "2026-11-02T14:09:49.700573+00:00",
      "modified": "2026-11-02T14:09:49.700573+00:00",
      "x_ally_original_id": "clm:9fc66ae6-4177-4365-80ba-9f46e9bae8dc",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Federal Bureau of Investigation",
          "url": "https://www.fbi.gov/investigate/cyber/alerts/2026/north-korea-responsible-for-6-billion-binance-attack",
          "external_id": "cit:9f75f77c-1f97-4c22-859d-7a5f5568a5f1",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5b7b456fb35f7ef52a1b64746e8a7331dc80482885a3c602ec637f4097bc2b58"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The FBI attributed the theft of more than US$6 billion in virtual assets from Binance to North Korea and dated it to on or about October 29, 2026. It calls the specific malicious activity TraderTraitor."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--719b7b8d-ce10-509a-8bfa-914c6f6135e6",
      "created": "2026-11-02T14:09:49.700573+00:00",
      "modified": "2026-11-02T14:09:49.700573+00:00",
      "x_ally_original_id": "clm:08ac01fb-8468-45fa-911f-9a12e08b6abd",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Federal Bureau of Investigation",
          "url": "https://www.fbi.gov/investigate/cyber/alerts/2026/north-korea-responsible-for-6-billion-binance-attack",
          "external_id": "cit:530a0523-37fe-40fe-9563-4b907d585daf",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5b7b456fb35f7ef52a1b64746e8a7331dc80482885a3c602ec637f4097bc2b58"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The FBI, US Secret Service and IRS Criminal Investigation observed the actors converting stolen assets primarily into Ethereum."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--95c1fdb4-9ae4-5f96-8384-dd13c1902736",
      "created": "2026-11-02T14:09:49.700573+00:00",
      "modified": "2026-11-02T14:09:49.700573+00:00",
      "x_ally_original_id": "clm:9afac384-97b3-4274-8aba-02c92ccdf07e",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Federal Bureau of Investigation",
          "url": "https://www.fbi.gov/investigate/cyber/alerts/2026/north-korea-responsible-for-6-billion-binance-attack",
          "external_id": "cit:ad472f12-fff1-4846-846d-e9feb425aab0",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5b7b456fb35f7ef52a1b64746e8a7331dc80482885a3c602ec637f4097bc2b58"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The agencies urged private-sector virtual-asset services to block transactions involving or derived from identified laundering addresses."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--9f17e690-9e7e-5b92-8cc8-9c04016c7645",
      "created": "2026-11-02T14:09:49.700573+00:00",
      "modified": "2026-11-02T14:09:49.700573+00:00",
      "x_ally_original_id": "clm:3bb2067d-29e4-4d62-9d64-82f4a96f7b08",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Federal Bureau of Investigation",
          "url": "https://www.fbi.gov/investigate/cyber/alerts/2026/north-korea-responsible-for-6-billion-binance-attack",
          "external_id": "cit:38f44d04-340f-483f-af7a-736afbeb5f96",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5b7b456fb35f7ef52a1b64746e8a7331dc80482885a3c602ec637f4097bc2b58"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-31"
      }
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--9b819fed-828d-5818-819b-f083a9c966aa",
      "created": "2026-11-02T14:09:49.700573+00:00",
      "modified": "2026-11-02T14:09:49.700573+00:00",
      "x_ally_original_id": "evt:bbadb02a-b375-4aab-8d9c-9c4116968be4",
      "name": "FBI publishes attribution and disruption advisory"
    },
    {
      "type": "x-ally-threat-actor",
      "spec_version": "2.1",
      "id": "x-ally-threat-actor--92ec2690-e834-5555-8d25-f8260c8ae731",
      "created": "2026-11-02T14:09:49.700573+00:00",
      "modified": "2026-11-02T14:09:49.700573+00:00",
      "x_ally_original_id": "act:1392c41e-45d2-4cd5-9d31-628093767a7d",
      "name": "TraderTraitor"
    }
  ]
}