Bitfinex Hacker on Binance Hack: North Korean Hackers Target the Weakest Links Bitfinex hacker Ilya Lichtenstein @cipherstein told CNN on November 1 that the Binance hack resembled North Korean tactics targeting weak links. Attackers may phish employees into downloading malware instead of breaching exchange websites. He called the first 48 hours crucial for tracing stolen funds. AI agents speed transfers, but blockchain records remain traceable years later. Lichtenstein stole about 120,000 BTC from Bitfinex in 2016. He and his wife pleaded guilty to money laundering conspiracy in 2023. Sentenced to five years in 2024, he was released early in January 2026 and now says he works as a white-hat hacker.