Federal investigators have identified North Korean hackers as the culprits behind a staggering 6.3 billion dollar theft from Binance, marking one of the most significant heists in the history of digital assets. According to a statement released by the FBI on Saturday, the operation was carried out by a sophisticated group known as TraderTraitor, who had previously been linked to a massive robbery at the Bybit platform last year. Investigators noted that the thieves attempted to hide their tracks by converting the stolen funds primarily into Ethereum, though officials warn that the laundering process is likely still ongoing across multiple stages.
The breach appears to have begun with a highly targeted intrusion involving a compromised laptop and specialized malware designed to wipe away forensic evidence. Richard Teng, co-CEO of Binance, described the incident as an incredibly complex attack that made tracing and investigation particularly difficult. In the immediate aftermath of the discovery, the exchange took the drastic step of freezing customer withdrawals while it worked to secure its systems and assess the total damage caused by the infiltration.
To maintain stability and user trust, Binance has moved quickly to cover ninety percent of the missing assets using its own corporate treasury and various insurance reserves, including its dedicated Secure Asset Fund for Users. While some less liquid tokens may take more time to replace, company leadership has vowed that Binance will absorb the full financial blow so that individual customers do not suffer losses. This move comes alongside a new proof-of-reserves snapshot intended to prove that all remaining user holdings are fully backed on a one-to-one basis.
As market prices dipped following the news, Binance indicated it would resume normal withdrawal services starting Sunday. Meanwhile, federal authorities are urging other virtual asset service providers to stay vigilant and block specific digital addresses associated with TraderTraitor’s current laundering efforts. The scale of this theft underscores an escalating trend of state sponsored cybercrime targeting high value cryptocurrency targets to bypass traditional global financial restrictions.
