Hackers Steal Record $6.3 Billion From Binance in Cyber Attack Tied to North Korea

Hackers stole roughly $6.3 billion from Binance in the largest cryptocurrency theft on record, with investigators pointing to North Korea as the culprit. TRM Labs, a U.S.-based tech security firm, stated with high confidence that an elite North Korean hacking unit named TraderTraitor carried out the attack. The attacker moved about $6.36 billion out of Binance wallets across ten blockchains, with most of the funds taken in roughly twenty minutes.

Investigation and Response

Binance stated that customer deposits remained unaffected while withdrawals were temporarily suspended, though operations were expected to resume within a day or two. The company promised to cover all customer losses and noted that it worked alongside blockchain partners to freeze about $3 billion in affected assets. An initial company review suggested a compromised laptop was involved, while later checks revealed more points of breach. The FBI also accused TraderTraitor of leading the attack and stated that the hackers have been converting the stolen money into Ethereum to prepare for further laundering stages. Jonathan Levin, CEO of blockchain research firm Chainalysis, similarly stated that the hack was likely done by the same North Korean group. Experts note that North Korea uses illicit cyber operations to fund its economy and nuclear program under heavy U.N. sanctions.

Context

Cryptocurrency exchanges use digital wallets connected to the internet to hold users' funds and authorization keys, making them high-value targets for advanced cybercriminal groups. State-backed hacking units often exploit complex technical vulnerabilities to drain massive sums before converting the digital assets across multiple blockchains to hide their tracks.