FBI Attributes Record $6.3 Billion Binance Crypto Heist to North Korea
The FBI attributes a record $6.3 billion crypto heist at Binance to North Korean hackers from the TraderTraitor group. Investigators are working to track stolen assets as the exchange pledges full customer compensation.
The Federal Bureau of Investigation (FBI) has announced that a massive cyberattack resulting in the theft of approximately $6.3 billion from the Binance cryptocurrency exchange was carried out by North Korean hackers. In an official statement, the agency linked the breach to the TraderTraitor group, which US authorities also hold responsible for stealing $1.5 billion from the Bybit exchange last year. Investigators detailed the methods used by the attackers to obscure the trail of funds and warned against ongoing money laundering attempts through digital asset trading platforms.
According to the FBI, the Thursday attack is tied to the malicious activities of the TraderTraitor network, associated with North Korean state-sponsored hackers. This represents an attack more than four times larger than the previous breach of Bybit, where digital assets worth roughly $1.5 billion were stolen in what was then considered one of the largest heists in cryptocurrency history. The latest breach against Binance, the world's largest digital asset exchange, saw hackers siphon approximately $6.3 billion within minutes.
Investigation and Laundering Tactics
The FBI's attribution is the first official designation of the attack, following preliminary assessments by cybersecurity experts pointing to North Korean methods. Investigators revealed that TraderTraitor has begun converting the stolen assets primarily into Ethereum. The FBI estimates that the perpetrators will next attempt to funnel the funds through decentralized finance (DeFi) protocols and instant cryptocurrency exchange services.
These platforms enable rapid asset conversion without a traditional financial intermediary, complicating efforts by authorities to trace and recover the funds. In response, the FBI has urged crypto exchanges, blockchain analysis firms, and industry stakeholders to freeze transactions linked to identified addresses. Ari Redbord, chief policy officer at blockchain intelligence firm TRM Labs, noted that hackers typically split massive sums into smaller tranches and route them through smaller exchanges to evade surveillance. "It is a bank robbery, but at the speed of the internet," Redbord remarked, adding that blockchain analytics allow investigators to track funds in real time.
Official Responses and Exchange Measures
Despite the definitive FBI assessment, US President Donald Trump adopted a more cautious stance when questioned about the incident. Speaking to reporters, President Donald Trump stated, "I am not concerned. We are learning about it," while adding that authorities do not yet definitively know if North Korea was behind the attack, though investigations remain ongoing.
Meanwhile, Binance announced on Saturday that it holds sufficient reserves in the stolen digital assets to cover approximately 90% of the shortfall, pledging to fully compensate affected customers. US law enforcement and industry partners continue active efforts to trace the stolen assets and disrupt laundering attempts.
