FBI Links Record $6.3 Billion Binance Crypto Heist to North Korea

A North Korean hacking group, known as TraderTraitor, is suspected of orchestrating a massive cryptocurrency heist from Binance totaling over US$6 billion on October 29. This incident marks one of the largest crypto thefts in history and adds to a series of high-profile cyber attacks linked to Pyongyang. North Korea has invested significantly in its cyber capabilities for decades, reportedly training a force of around 8,400 personnel.

The Lazarus Group, notorious for hacking Sony Pictures in 2014, is believed to be linked to the TraderTraitor operation. South Korean intelligence estimates that the Reconnaissance General Bureau, North Korea's primary foreign intelligence agency, oversees much of the country's hacking activities. Notable cyber attacks attributed to North Korean hackers include the theft of $81 million from Bangladesh's central bank in 2016 and the WannaCry ransomware attack in 2017, which disrupted computers worldwide.

In 2022, the Lazarus-linked hackers stole around $620 million from the Ronin blockchain network. In February 2025, the FBI blamed TraderTraitor for stealing approximately $1.5 billion from cryptocurrency exchange Bybit. The stolen funds are then laundered and converted into cash, often funding military research, weapons procurement, and the defense industry.

This illicit cyber activity is driven by North Korea's need to obtain substantial sums of money quickly and with minimal resources, bypassing international sanctions through the pseudonymous and borderless nature of digital assets.