According to CoinMeta, security organization SEAL revealed that the hacker group TraderTraitor suspected of attacking Binance had been lurking in their environment for about 8 weeks before the theft occurred on October 29th. SEAL stated that the timeline and details initially reported by Binance match the pattern of attacks carried out by this group using fake companies and recruitment processes. The security organization believes that the attackers' period of lurking in the target environment provided an opportunity for the company to detect the intrusion.