FBI Attributes $6.3 Billion Binance Crypto Heist to North Korean Hackers

NEW DELHI — The Federal Bureau of Investigation (FBI) has linked North Korean hackers to the recent $6.3 billion theft from Binance, marking the largest cryptocurrency heist in history. The attack saw billions of dollars taken from the world's largest crypto exchange within minutes.

In a statement issued on Saturday, the FBI attributed the incident to malicious cyber activity by an entity called TraderTraitor. The bureau noted that the same actor was behind a $1.5 billion Bybit hack that occurred last year.

Following the attack, the FBI urged cryptocurrency exchanges and blockchain analytics firms to block transactions associated with specific addresses to prevent the laundering of the stolen funds. According to the bureau's investigation, TraderTraitor has been converting the stolen assets primarily into ethereum. The FBI anticipates that the hackers will attempt to further launder the funds using decentralized finance (DeFi) and instant swap services.

The security breach occurred on Thursday, when $6.3 billion in bitcoin and other digital currencies were drained from Binance. Several cryptocurrency experts previously pointed out that the incident bore characteristics typical of North Korean cyber attacks.

In response to the security breach, Binance stated on Saturday that it holds sufficient reserves in the same digital currency that was stolen to cover 90 percent of the missing assets. The company has also assured users that customers will receive full reimbursements for their losses.

"This massive security breach highlights the critical vulnerability of centralized digital asset platforms to sophisticated state-sponsored cyber threats. For the broader fintech and crypto ecosystem, this incident underscores the urgent need for robust, real-time transaction monitoring and stronger cross-border security protocols. While Binance's commitment to reimbursing customers helps maintain user trust, exchanges globally must significantly elevate their infrastructure resilience against increasingly advanced cyberattacks." — Dr. Shishir Gupta, Founder & CEO, StartupLanes