AnswersPublished21 sources
Why OneKey’s Yishi Wang Flagged BlackRock’s IBIT After the $6B Binance Hack
Wang’s warning was a hypothetical risk assessment, not evidence IBIT had been hacked or targeted. The FBI attributed the October 29, 2026 Binance theft of more than $6 billion to North Korea’s TraderTraitor activity and said the stolen assets were being converted mainly into Ethereum.
Published byEdited with GPT-6 LunaImages generated with GPT Image 2
Research answer
Key takeaways
- Wang’s warning was a hypothetical risk assessment, not evidence IBIT had been hacked or targeted.
- The FBI attributed the October 29, 2026 Binance theft of more than $6 billion to North Korea’s TraderTraitor activity and said the stolen assets were being converted mainly into Ethereum.
AI Prompt
openai.comCreate a landscape editorial hero image for this Studio Global article: Why did OneKey founder and CEO Yishi Wang warn on October 30, 2026, that BlackRock’s iShares Bitcoin Trust (IBIT) could be on North Korean h. Article summary: Wang’s warning was about the attractiveness of a large, concentrated Bitcoin holding and the possibility of compromising transaction approvals—not evidence that IBIT had been hacked. Reports of his October 30 comments de. Topic tags: general, government, general web. Style: premium digital editorial illustration, source-backed research mood, clean composition, high detail, modern web publication hero. Use reference image context only for broad subject, composition, and topical grounding; do not copy the exact image. Avoid: logos, brand marks, copyrighted characters, real person likenesses, fake screenshots, UI text, readable text, watermarks, charts with fake n
OneKey founder Yishi Wang raised a hypothetical concern about BlackRock’s iShares Bitcoin Trust (IBIT) after the October 29, 2026 theft of more than $6 billion from Binance. His point was that a very large pool of Bitcoin and the systems used to approve transactions could be attractive targets. The warning is not evidence that IBIT or its custodians have been compromised, or that an attack is underway. 1
20
24
What prompted Wang’s warning
On October 31, the FBI attributed the Binance theft to North Korea and named the activity TraderTraitor. The agency also said it had observed stolen assets being converted primarily into Ethereum. 1 Reporting linked the same activity to an earlier $1.5 billion theft from Bybit.
6
8
Binance reportedly linked its incident to a DevOps engineer’s compromised laptop. That account describes a reported access route; it does not, by itself, establish every detail of how the theft was carried out. 4 Wang’s broader concern was that attackers might compromise transaction approval or signing processes without directly taking private keys. That is a risk he raised, not a finding that IBIT’s systems have the same weakness.
24
The response at Binance should also be kept separate from the question of whether stolen assets were recovered. Binance resumed some withdrawals in phases on November 1. 5 Some reports described about 90% of the stolen value as replaced, while another news feed carried a 95% figure. Those differing reports do not establish a final, independently verified recovery total.
45
51
Why IBIT’s size and custody drew attention
Reports put IBIT’s holdings at roughly 815,000 BTC, worth around $62 billion to $63 billion, and identified Coinbase as its main Bitcoin custodian. 17
20
22 At that scale, the hypothetical loss of $6 billion would be roughly one-tenth of the reported asset value. That comparison illustrates potential exposure; it does not indicate that such a loss is likely or that an attacker has selected IBIT.
Anchorage Digital has also been added as an additional custodian, but reporting said there were no current plans to transfer Bitcoin from Coinbase to Anchorage. An additional custodian does not, on its own, show that the existing holdings have been divided between providers. 20
22
What shareholders should—and shouldn’t—infer
A major theft could create losses if assets were not recovered and available insurance or custodian compensation did not cover the shortfall. Reports quoting Wang said BlackRock had not separately insured IBIT’s Bitcoin. 22 But the available information here does not establish the complete insurance terms, exclusions, or how any liability limits would apply in a specific incident. Those details should not be treated as a guaranteed level of protection—or as proof that losses would fall on shareholders.
Most importantly, the evidence supports a warning about a possible risk, not a confirmed threat. Reports of Wang’s comments say he offered no evidence of an active effort against IBIT, and the available material does not establish that IBIT or Coinbase’s custody systems have been breached. 20 The Binance theft gave context to his concern; it did not verify his speculation about a possible target.
Studio Global AI
Continue your research
This page includes a source-backed answer you can continue inside Studio Global.
People also ask
What is the short answer to "Why OneKey’s Yishi Wang Flagged BlackRock’s IBIT After the $6B Binance Hack"?
Wang’s warning was a hypothetical risk assessment, not evidence IBIT had been hacked or targeted.
What are the key points to validate first?
Wang’s warning was a hypothetical risk assessment, not evidence IBIT had been hacked or targeted. The FBI attributed the October 29, 2026 Binance theft of more than $6 billion to North Korea’s TraderTraitor activity and said the stolen assets were being converted mainly into Ethereum.