Why North Korea's 'elite' hackers are the prime suspect in major Binance hack
Published . Updated .
Key takeaways
Market Call
Think this story will push the stock up or down over the next three trading days? Make a free call and see what other readers think. Points are play money with no cash value.
Get these market calls by email
The week's biggest market-moving stories, Congress trades and Trump posts, with the tickers they touch. Free, one email a week.
Free. We only use your email to send the digest, never sell or share it, and every email has a one-click unsubscribe link. See our privacy policy.
If the accusations are true, the record-making heist shows how powerful suspected North Korean hackers have become.
Directly affected
- No company is named in this report.
Indirectly affected
- CIBR First Trust NASDAQ Cybersecurity ETF+6.1% 30d
First Trust NASDAQ Cybersecurity ETF: it holds cybersecurity firms. Linked by “hack” (cybersecurity) in this story.
- EWY iShares MSCI South Korea ETF-21.2% 30d
iShares MSCI South Korea ETF holds stocks listed in South Korea, which this story is about (“korea”).
- CRWD CrowdStrike Holdings+3.3% 11d
CrowdStrike Holdings (prepackaged software): hacks and breaches raise demand for security software. Linked by “hack” (cybersecurity) in this story.
- PANW Palo Alto Networks-11.0% 30d
Palo Alto Networks (computer peripheral equipment): hacks and breaches raise demand for security software. Linked by “hack” (cybersecurity) in this story.
- FTNT Fortinet-28.3% 30d
Fortinet (computer peripheral equipment): hacks and breaches raise demand for security software. Linked by “hack” (cybersecurity) in this story.
- SKHY SK hynix
SK hynix (semiconductors and related devices) is one of the largest South Korea-based companies traded in the US, so news about South Korea (“korea”) reaches its shares.
- KB KB Financial Group-4.7% 5d
KB Financial Group (commercial banks) is one of the largest South Korea-based companies traded in the US, so news about South Korea (“korea”) reaches its shares.
- SHG Shinhan Financial Group
Shinhan Financial Group (national commercial banks) is one of the largest South Korea-based companies traded in the US, so news about South Korea (“korea”) reaches its shares.
Price reaction, T-5 to T+3
| Ticker | T-5 | T-3 | T-1 | T0 | T+1 | T+2 | T+3 |
|---|---|---|---|---|---|---|---|
| CIBR | +7.38% | +6.85% | base | -4.22% | -3.71% | after close | after close |
| EWY | -0.14% | +8.46% | base | -0.87% | +1.35% | after close | after close |
| CRWD | +4.57% | +6.52% | base | -3.44% | -2.30% | after close | after close |
| PANW | +6.71% | +7.77% | base | -3.96% | -4.34% | after close | after close |
| FTNT | +34.78% | +28.07% | base | -7.23% | -5.82% | after close | after close |
| SKHY | -4.40% | +10.44% | base | -1.04% | +1.12% | after close | after close |
| KB | +0.45% | +2.38% | base | -0.55% | -1.51% | after close | after close |
| SHG | -0.50% | -0.05% | base | -2.01% | -3.45% | after close | after close |
Closing-price change versus T-1, the last close before the story. T0 to T+3 fill in after each market close. Prices: Alpaca IEX.
If the accusations are true, the record-making heist shows how powerful suspected North Korean hackers have become.
Source: BBC
How far First Tr Exchange-Traded Fd (CIBR) has moved since 2 Nov 2026
| Company | When | Move | Status |
|---|---|---|---|
| First Tr Exchange-Traded Fd (CIBR) | that day | -4.22% | final price |
| First Tr Exchange-Traded Fd (CIBR) | the next day | -3.71% | final price |
| First Tr Exchange-Traded Fd (CIBR) | three days earlier | +6.85% | final price |
| First Tr Exchange-Traded Fd (CIBR) | five days earlier | +7.38% | final price |
| CrowdStrike Holdings (CRWD) | that day | -3.44% | final price |
| CrowdStrike Holdings (CRWD) | the next day | -2.30% | final price |
| CrowdStrike Holdings (CRWD) | three days earlier | +6.52% | final price |
| CrowdStrike Holdings (CRWD) | five days earlier | +4.57% | final price |
| Ishares Msci South Korea Etf (EWY) | that day | -0.87% | final price |
| Ishares Msci South Korea Etf (EWY) | the next day | +1.35% | final price |
| Ishares Msci South Korea Etf (EWY) | three days earlier | +8.46% | final price |
| Ishares Msci South Korea Etf (EWY) | five days earlier | -0.14% | final price |
| Fortinet (FTNT) | that day | -7.23% | final price |
| Fortinet (FTNT) | the next day | -5.82% | final price |
| Fortinet (FTNT) | three days earlier | +28.07% | final price |
| Fortinet (FTNT) | five days earlier | +34.78% | final price |
| KB Financial Group (KB) | that day | -0.55% | final price |
| KB Financial Group (KB) | the next day | -1.51% | final price |
| KB Financial Group (KB) | three days earlier | +2.38% | final price |
| KB Financial Group (KB) | five days earlier | +0.45% | final price |
| Palo Alto Networks (PANW) | that day | -3.96% | final price |
| Palo Alto Networks (PANW) | the next day | -4.34% | final price |
| Palo Alto Networks (PANW) | three days earlier | +7.77% | final price |
| Palo Alto Networks (PANW) | five days earlier | +6.71% | final price |
| Shinhan Financial Group (SHG) | that day | -2.01% | final price |
| Shinhan Financial Group (SHG) | the next day | -3.45% | final price |
| Shinhan Financial Group (SHG) | three days earlier | -0.05% | final price |
| Shinhan Financial Group (SHG) | five days earlier | -0.50% | final price |
| SKHY | that day | -1.04% | final price |
| SKHY | the next day | +1.12% | final price |
| SKHY | three days earlier | +10.44% | final price |
| SKHY | five days earlier | -4.40% | final price |
Trades by members of Congress and officials in the stocks in this story
- Donald J Trump, an executive branch official, sold CrowdStrike Holdings (CRWD), worth $100,001 - $250,000 on 21 Aug 2026. That is 73 days before publication. Filed 8 Oct 2026. View the filing.
- Rep. Gilbert Cisneros bought CrowdStrike Holdings (CRWD), worth $1,001 - $15,000 on 7 Aug 2026. That is 87 days before publication. Filed 10 Sep 2026. View the filing.
- Donald J Trump, an executive branch official, sold Palo Alto Networks (PANW), worth $15,001 - $50,000 on 28 Aug 2026. That is 66 days before publication. Filed 8 Oct 2026. View the filing.
- Donald J Trump, an executive branch official, sold Palo Alto Networks (PANW), worth $500,001 - $1,000,000 on 21 Aug 2026. That is 73 days before publication. Filed 8 Oct 2026. View the filing.
- Donald J Trump, an executive branch official, sold Fortinet (FTNT), worth $500,001 - $1,000,000 on 21 Aug 2026. That is 73 days before publication. Filed 8 Oct 2026. View the filing.
- Rep. Gilbert Cisneros bought SK hynix (SKHY), worth $1,001 - $15,000 on 7 Aug 2026. That is 87 days before publication. Filed 10 Sep 2026. View the filing.
Public disclosure filings, not a recommendation. The filing link is the source document. News use of these reports still sits under 5 U.S.C. § 13107(c).
Who gains and who loses around First Tr Exchange-Traded Fd (CIBR)
Companies carried with this story
- CIBR First Tr Exchange-Traded Fd
First Tr Exchange-Traded Fd (CIBR) is linked, with no stored direction, medium confidence in the 2 Nov 2026 story “Why North Korea's 'elite' hackers are the prime suspect in major Binance hack.” Reason on file: First Trust NASDAQ Cybersecurity ETF: it holds cybersecurity firms. Linked by “hack” (cybersecurity) in this story
- EWY Ishares Msci South Korea Etf
For “Why North Korea's 'elite' hackers are the prime suspect in major Binance hack,” Ishares Msci South Korea Etf (EWY) is linked, with no stored direction, medium confidence. Reason on file: iShares MSCI South Korea ETF holds stocks listed in South Korea, which this story is about (“korea”)
- CRWD CrowdStrike Holdings
CrowdStrike Holdings (CRWD) is linked, with no stored direction, medium confidence in the 2 Nov 2026 story “Why North Korea's 'elite' hackers are the prime suspect in major Binance hack.” Reason on file: CrowdStrike Holdings (prepackaged software): hacks and breaches raise demand for security software. Linked by “hack” (cybersecurity) in this story
- PANW Palo Alto Networks
In “Why North Korea's 'elite' hackers are the prime suspect in major Binance hack,” Palo Alto Networks (PANW) is linked, with no stored direction, medium confidence. Reason on file: Palo Alto Networks (computer peripheral equipment): hacks and breaches raise demand for security software. Linked by “hack” (cybersecurity) in this story
- FTNT Fortinet
For “Why North Korea's 'elite' hackers are the prime suspect in major Binance hack,” Fortinet (FTNT) is linked, with no stored direction, medium confidence. Reason on file: Fortinet (computer peripheral equipment): hacks and breaches raise demand for security software. Linked by “hack” (cybersecurity) in this story
- KB KB Financial Group
KB Financial Group (KB) is linked, with no stored direction, medium confidence in the 2 Nov 2026 story “Why North Korea's 'elite' hackers are the prime suspect in major Binance hack.” Reason on file: KB Financial Group (commercial banks) is one of the largest South Korea-based companies traded in the US, so news about South Korea (“korea”) reaches its shares
- SHG Shinhan Financial Group
In “Why North Korea's 'elite' hackers are the prime suspect in major Binance hack,” Shinhan Financial Group (SHG) is linked, with no stored direction, medium confidence. Reason on file: Shinhan Financial Group (national commercial banks) is one of the largest South Korea-based companies traded in the US, so news about South Korea (“korea”) reaches its shares
First Tr Exchange-Traded Fd (CIBR)
First Tr Exchange-Traded Fd (CIBR) is the company in “Why North Korea's 'elite' hackers are the prime suspect in major Binance hack,” the 2 Nov 2026 this story story.
For First Tr Exchange-Traded Fd (CIBR), the reason on file says First Trust NASDAQ Cybersecurity ETF: it holds cybersecurity firms. Linked by “hack” (cybersecurity) in this story
A second company, Ishares Msci South Korea Etf (EWY), is listed for a different reason: iShares MSCI South Korea ETF holds stocks listed in South Korea, which this story is about (“korea”)
Price levels for First Tr Exchange-Traded Fd (CIBR)
CIBR traded between 98.09 and 110.59 across 20 sessions. The latest close on file is 107.88. CRWD traded between 230.91 and 286.94 across 8 sessions. The latest close on file is 249.35. EWY traded between 148.30 and 190.33 across 20 sessions. The latest close on file is 151.81.
What the saved facts support for First Tr Exchange-Traded Fd (CIBR)
46 out of 100
“Why North Korea's 'elite' hackers are the prime suspect in major Binance hack” scores 46 out of 100. The score uses 1 sources, and 7 linked companies.