Binance says 90% of assets stolen in record hack have been replenished

Two prominent blockchain analysis firms have concluded that a North Korean state-backed hacker group, known as the Lazarus Group or TraderTraitor, is the most likely perpetrator behind the $6.3 billion breach of Binance, the world's leading cryptocurrency exchange. This latest incident is among numerous suspected cyber attacks linked to North Korea, a country notorious for its restricted internet access and economic struggles.

Experts attribute the nation's financial woes to its reliance on cybercrime, a claim North Korea has repeatedly denied.

One of the most notable cyber attacks attributed to North Korea occurred in 2014, targeting Sony Pictures for creating the film "The Interview," which depicted a plot to assassinate Kim Jong Un. The resulting cyber attack exposed sensitive internal emails of the studio. More recently, in 2022, North Korean hackers were suspected of stealing $620 million worth of cryptocurrency.

The FBI has formally accused North Korea of participating in illicit cybercrime and virtual asset theft activities, including converting stolen assets into Bitcoin and other digital currencies to eventually turn them into hard currency. Analysts believe North Korean hackers, particularly those in the Lazarus Group, employ various techniques to launder and disperse illicit funds.

In the recent Binance hack, North Korean agents allegedly exploited a special authorization to turn a hot wallet, which is connected to the internet, into an automated system that moved funds to the attackers. TRM Labs explained that it is probable the attackers gained access to Binance's hot wallet signing system as part of their scheme.

Binance has not explicitly acknowledged the connection between the incident and North Korea, but CEO Richard Teng revealed that the breach was more extensive than initially believed. Approximately 80% of the stolen assets have been recovered, but the remaining portion remains unaccounted for. If the accusations are accurate, this record-breaking heist demonstrates the growing sophistication of suspected North Korean hackers and the increasing capabilities of their hacking tools, potentially enhanced by the use of artificial intelligence.