FBI blames North Korea’s TraderTraitor hackers for record $6.43 billion Binance crypto heist
US investigators say North Korea’s TraderTraitor group stole $6.43 billion from Binance, freezing only part of the haul so far and underscoring how state-backed hackers can raid major exchanges.
US authorities have tied North Korea to what they describe as the largest cryptocurrency theft on record, saying a hacking group linked to Pyongyang stole $6.43 billion from Binance.
The FBI confirmed that the TraderTraitor group, which Washington has previously associated with North Korean state interests, was behind the Binance heist. According to investigators, the attackers penetrated systems related to the exchange and siphoned off digital assets worth $6.43 billion.
Law enforcement agencies say they have frozen about $2.85 billion of the stolen funds so far, tracing how the money moved across blockchain networks in an apparent effort to hide its origin. That still leaves a substantial sum outside their control.
The case highlights how a single breach at a major centralized platform can expose users worldwide, regardless of their own security habits. Binance is one of the biggest names in global crypto trading, which makes the scale of the loss a warning for regulators and customers alike.
The Binance investigation is unfolding alongside another incident that shows how attackers exploit weaknesses around, rather than inside, core blockchain systems. In a separate case, hackers stole $2.7 million from Polymarket traders in less than an hour by hijacking a third-party DebugBear script. They didn’t need access to private keys, using active browser sessions instead to drain funds and trading positions. Polymarket reported that 726 wallets were affected and that $3.9 million in refunds would be provided.
Together, the two cases point to a wider structural problem: the security of crypto assets often hinges on a mesh of external services, monitoring tools and web scripts that users barely see. Compromising any one of those components can give well-resourced attackers an entry point.
For governments, the Binance heist is more than a financial crime. When billions in value can be diverted into channels beyond normal banking oversight, it potentially funds missile programs and other activities of sanctioned states.
The next indicators to watch are whether US authorities and their partners announce new sanctions on wallets and services linked to the laundering of the Binance funds, and how major exchanges adjust their own defenses and third-party dependencies in response to a theft on this scale.
Sources
- OSINT