FBI Attributes $6.3 Billion Binance Crypto Theft to North Korean Hackers TraderTraitor

On a weekend when the scale of digital theft had become hard to picture, the FBI named the hand behind it: North Korean operatives working under the name TraderTraitor, responsible for draining $6.3 billion from Binance in minutes. It is a reminder that the vaults of the modern economy are guarded not only by locks but by the vigilance of strangers across borders. Binance, the exchange that was robbed, has pledged that its customers will be made whole, even as investigators race to stop the stolen wealth from dissolving into the tangled corridors of decentralized finance.

On Saturday, the FBI publicly named the people behind the largest cryptocurrency theft ever recorded. The bureau said North Korean hackers had carried out the raid on Binance, the world's largest crypto exchange, which lost $6.3 billion in bitcoin and other digital currency in a matter of minutes on Thursday.

In the hours after the attack, crypto experts had already noticed the hallmarks of a North Korean operation. The FBI's statement turned that suspicion into formal attribution, tying the strike to a group called TraderTraitor, the same actors linked to last year's $1.5 billion hack of Bybit.

The bureau also asked exchanges, blockchain analytics firms and others to block transactions tied to a list of addresses it identified. Its concern is laundering, the process of hiding where stolen money came from. The FBI said the group has so far been converting the assets mainly into ether and is expected to move next through DeFi platforms and instant swap services.

Binance responded the same day, saying it holds reserves in the stolen currency sufficient to cover 90% of the missing assets, and that customers would be fully reimbursed. What remains to be seen is whether freezes can catch the funds in time, and how the exchange closes the final 10% gap.

On Saturday, the FBI put a name to the people behind the largest cryptocurrency theft ever recorded. In a statement, the bureau said North Korean hackers had orchestrated the raid on Binance, which drained billions of dollars from the exchange in a matter of minutes.

The attack happened Thursday. According to the reporting, $6.3 billion in bitcoin and other digital currency was stolen from Binance, the world's largest crypto exchange. In the first hours afterward, several crypto experts said the heist bore the hallmarks of a North Korean operation. The FBI's statement moved that from informed suspicion to formal attribution.

The bureau tied this week's attack to what it called "malicious cyber activity" by an entity known as TraderTraitor. That is the same group behind last year's hack of the exchange Bybit, which took $1.5 billion. The Binance theft is more than four times that amount, and the FBI describes it as the biggest crypto heist in history.

The statement was also a request for help. The FBI asked crypto exchanges, blockchain analytics companies and others to block transactions linked to a set of addresses it identified. The aim is to stop the stolen money from being laundered, a process that would cover up where it came from and make it far harder to recover.

The bureau also described what its investigation has found so far. TraderTraitor, it said, has been converting the stolen assets primarily into ethereum. The FBI expects the group's next step will be to try to convert the assets through decentralized finance platforms, known as DeFi, and through what it called "instant swap services."

Binance responded the same day. The company said it had enough set aside, in the same digital currency that was stolen, to cover 90% of the missing assets. It promised that customers would be fully reimbursed.

That leaves two things to watch. The first is whether exchanges and analytics firms act on the FBI's request and freeze transactions tied to the flagged addresses, since the stolen funds are now being moved. The second is how Binance closes the remaining 10% gap between its reserves and the money that was taken, a gap the company has said it will cover.

Contáctanos FAQ