FBI pins $6.3B Binance crypto heist on North Korean hackers
Exchange scrambles to replace stolen funds as customers withdraw billions and hackers get busy laundering their haul
The FBI has implicated North Korean hackers, specifically the Lazarus Group known as TraderTraitor, as responsible for the massive $6.3 billion heist from Binance, the world's largest cryptocurrency exchange. The attack, which occurred on October 29, was traced back to a compromised DevOps engineer's laptop that granted the hackers access to Binance's systems, allowing them to authorize unauthorized withdrawals.
Binance has replenished about 95 percent of the stolen funds, but the remaining tokens are proving difficult to replace due to their limited liquidity. The FBI has shared a list of cryptocurrency wallet addresses tied to the theft and is urging exchanges and blockchain analytics firms to block transactions involving the stolen assets.
TraderTraitor has a history of targeting crypto exchanges, having previously been linked to a $308 million theft at DMM Bitcoin in 2024 and the $387.5 million heist at Bitget. Binance, which has the reserves to cover its customers, is facing the challenge of replacing the stolen cryptocurrency and tracking the hackers as they attempt to move the funds beyond their reach.
Written by urgent.news from The Register Science's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.