Blockchain Firms Link North Korea to Record $6.3B Binance Hack

Blockchain intelligence firms have attributed a massive cryptocurrency hack impacting more than $6 billion on Binance to a North Korean unit. Binance stated that it worked with partners to freeze approximately $3 billion in affected assets and announced it would cover all user losses, while withdrawals were temporarily suspended and expected to resume within a day or two.

According to reports published by blockchain analysis firms TRM and Chainalysis, the attack was likely carried out by TraderTraitor, identified as an elite North Korean hacking unit. TRM reported that an attacker moved approximately $6.36 billion out of Binance wallets across ten blockchains within roughly twenty minutes, making it potentially the largest cryptocurrency theft on record.

Key Details of the Incident and Response

• Reported Figures: Blockchain firms estimate the affected amount at roughly $6.36 billion.
• Asset Freezing: Binance reported freezing about $3 billion of the impacted assets with the help of blockchain partners.
• User Funds: Binance stated that deposits were unaffected, withdrawals were paused temporarily, and the exchange committed to covering all user losses.
• Investigation Findings: Binance indicated that initial findings pointed to a compromised laptop, with subsequent reviews revealing additional points of breach. The company also stated it found no evidence of a wallet private key leak.

Attribution and Context

TRM and Chainalysis publicly linked the attack to North Korea's TraderTraitor group, noting similarities to previous heists such as the Bybit hack. When asked about potential North Korean ties, a Binance spokesperson stated the company is working closely with law enforcement partners to identify the criminals.

Experts have noted that North Korea has increasingly turned to cyber activities to generate foreign currency amid international sanctions. Observers and cybersecurity analysts continue to review the technical aspects of the breach, including potential access tokens and approval controls.

Readers can verify official updates and statements directly through Binance's verified social media channels and official announcements.