On a Saturday that followed a sudden and staggering loss, the United States' federal investigators gave a name to those they believe emptied billions from Binance in only minutes. The theft, the largest of its kind on record, is now attributed to North Korean hackers, a state-linked pattern that has shadowed the crypto world for years and which many experts had already suspected. It is a reminder that money moving at the speed of the internet still carries the fingerprints of old geopolitics, and that the struggle to recover what was taken will unfold far more slowly than the theft itself.
FBI Attributes $6.3 Billion Binance Crypto Heist to North Korean Hackers TraderTraitor
Bank robbery at the speed of the Internet
Mark
Why does the FBI naming North Korea matter, if experts were already saying it on Thursday?
Mimi
Because it turns an expert read into an official attribution. It also lets the bureau ask exchanges and analytics firms to block specific addresses, which is the practical part.
Mark
And the link to Bybit?
Mimi
The FBI says the same actor, TraderTraitor, was behind the $1.5 billion Bybit hack last year. This theft is $6.3 billion, so it's a much larger run by the same group.
Luke
Worth being careful there. The attribution comes from the FBI's statement, and the reporting doesn't lay out the evidence behind it. We know the claim and who made it, not how they reached it.
Mark
What are the hackers likely to do with the money?
Mimi
The FBI says they've been converting mostly into ethereum and expects them to turn to DeFi and instant swap services next.
Luke
That's an expectation, not something observed yet. Same with Ari Redbord's view that they'll split the funds and use smaller exchanges over months. It's one expert's forecast.
Mark
Redbord also said the funds can be traced in real time. Does that mean they'll be recovered?
Mimi
Not necessarily. He said tracing allows investigators to disrupt and seize back funds, but he framed it as a cat and mouse game.
Luke
And nothing in the reporting says any money has been recovered so far.
Mark
What about Binance customers?
Mimi
Binance says it holds enough of the same currency to cover 90% of what's missing and promises full reimbursement. That's the company's own statement.
Le Pouls
- A Thursday raid drained some $6.3 billion in bitcoin and other digital currency from Binance in minutes, shaking the world's largest crypto exchange.
- The FBI has now formally named North Korean hackers, tied to TraderTraitor, the same group behind last year's $1.5 billion Bybit hack.
- Investigators are racing to block laundering routes through DeFi and instant swap services before the stolen funds vanish into smaller platforms.
- Binance says reserves cover 90% of the missing assets and promises full reimbursement, but the laundering fight could stretch across months.
On a Saturday that followed a sudden and staggering loss, the United States' federal investigators gave a name to those they believe emptied billions from Binance in only minutes. The theft, the largest of its kind on record, is now attributed to North Korean hackers, a state-linked pattern that has shadowed the crypto world for years and which many experts had already suspected. It is a reminder that money moving at the speed of the internet still carries the fingerprints of old geopolitics, and that the struggle to recover what was taken will unfold far more slowly than the theft itself.
On Saturday, the FBI publicly attributed one of the largest financial thefts in digital history to North Korean hackers. The attack came on Thursday, when some $6.3 billion in bitcoin and other digital currency was drained from Binance, the world's largest crypto exchange. Experts had quickly suspected a North Korean operation, and the bureau's statement moved that suspicion into formal attribution.
The FBI linked the theft to TraderTraitor, the group it says also carried out a $1.5 billion hack of Bybit last year. That earlier case, now dwarfed by this one, has become the benchmark against which the Binance theft is measured. Investigators found the group was converting the stolen assets mainly into ethereum, and they expect it to push the money further through decentralized finance and instant swap services.
To stop that, the FBI has asked exchanges and blockchain analytics firms to block transactions tied to a list of addresses. Ari Redbord of TRM Labs expects the hackers to split the funds into smaller pieces and route them through minor exchanges, a process that could take months. Yet he also noted that the same speed that enables theft allows funds to be traced in real time, giving investigators a chance to disrupt laundering and recover money.
Binance, for its part, said it had set aside enough of the stolen currency to cover 90% of the missing assets and pledged that customers would be fully reimbursed. What comes next is a long pursuit, and the coming months will show how much of the money can be caught.
On Saturday, the FBI put a name to the people it says emptied billions of dollars from Binance in a matter of minutes. In a statement, the bureau said the theft, the largest crypto heist on record, was the work of North Korean hackers.
The attack happened on Thursday. Some $6.3 billion in bitcoin and other digital currency was taken from Binance, the world's largest crypto exchange. Several crypto experts said at the time that it bore the hallmarks of a North Korean operation. The FBI's statement moved that from informed suspicion to a formal attribution.
The bureau tied the theft to what it called malicious cyber activity by an entity known as TraderTraitor. The same actors, it said, were behind a $1.5 billion hack of the exchange Bybit last year. That earlier case is now the benchmark against which this one is measured: the Binance theft is more than four times its size.
The FBI's investigation found that TraderTraitor was converting the stolen assets primarily into ethereum. The bureau expects the group to now try to convert the money further using decentralized finance, known as DeFi, and what it described as instant swap services. It asked crypto exchanges, blockchain analytics companies and others to block transactions linked to a set of addresses, so the funds cannot be laundered and their origin cannot be hidden.
Ari Redbord, chief policy officer at the blockchain intelligence firm TRM Labs, said he expects the hackers to split the stolen assets into pieces and run them through smaller exchanges to avoid detection. That process, he said, could unfold over months. He described the theft as bank robbery at the speed of the internet, but noted that the same speed works in the other direction: funds can be tracked and traced in real time, which lets investigators build cases, disrupt the laundering and seize money back. He called it a cat and mouse game.
Binance said on Saturday that it had set aside enough of the same digital currency that was stolen to cover 90% of the missing assets. The company promised customers would be fully reimbursed.
What to watch now is the laundering. The FBI's request to exchanges and analytics firms is aimed at closing off routes before the money disappears into smaller platforms, and the months-long timeline Redbord describes is the window in which any funds might be frozen or recovered.
Citations marquantes
It's bank robbery, in this case, at the speed of the Internet. However, we can also track and trace those funds in real time.— Ari Redbord, chief policy officer, TRM Labs
Envie de l'histoire complète ?
Lire l'original sur ITV News ↗