On a quiet Saturday, the FBI named the actors it believes emptied billions of dollars from Binance in minutes, pointing to North Korean hackers operating under the name TraderTraitor. The same hand is traced to a $1.5 billion attack on Bybit the previous year, a pattern that reveals how digital theft at this scale tends to echo across the places where money is kept. The stolen funds now move through a hidden passage of swaps and decentralized markets, and the outcome depends on whether the gatekeepers of that passage choose to close their doors. For Binance's customers, the question is simpler
FBI Attributes $6.3 Billion Binance Theft to North Korean Hackers Known as TraderTraitor
On a quiet Saturday, the FBI named the actors it believes emptied billions of dollars from Binance in minutes, pointing to North Korean hackers operating under the name TraderTraitor. The same hand is traced to a $1.5 billion attack on Bybit the previous year, a pattern that reveals how digital theft at this scale tends to echo across the places where money is kept. The stolen funds now move through a hidden passage of swaps and decentralized markets, and the outcome depends on whether the gatekeepers of that passage choose to close their doors. For Binance's customers, the question is simpler and more human: whether what was lost will be restored.
On Saturday, the FBI publicly attributed the theft of $6.3 billion from Binance, the world's largest crypto exchange, to North Korean hackers. The theft took place on Thursday, and though crypto experts had suspected a North Korean hand from the start, the bureau's statement now makes that assessment official. The FBI tied the attack to a group it calls TraderTraitor, the same actors it believes were behind the $1.5 billion Bybit hack last year.
The focus has now shifted to the money itself. Investigators found the group has been converting the stolen assets mainly into ethereum, and they expect it will try to move them through decentralized finance and instant swap services. The FBI has asked exchanges and blockchain analytics firms to block transactions linked to specific addresses, hoping to stop the funds from being laundered out of sight.
TRM Labs' Ari Redbord described the coming months as a cat-and-mouse game, with hackers breaking the funds into smaller pieces and routing them through smaller exchanges. The same tracing technology that makes laundering possible, he noted, also allows investigators to follow the money in real time and seize it back.
For Binance's customers, the most pressing concern is whether they will be made whole. The company said it has set aside reserves, in the same digital currency that was stolen, to cover 90% of the missing assets, and it has promised full reimbursement.
On Saturday, the FBI put a name to the people it says emptied billions of dollars from Binance in a matter of minutes. In a statement, the bureau said the theft, described as the biggest crypto heist in history, was orchestrated by North Korean hackers.
The bureau tied this week's attack to what it called "malicious cyber activity" by an entity known as TraderTraitor. The FBI said the same actors were behind the $1.5 billion Bybit hack last year, which connects the Binance theft to an earlier large-scale attack on a crypto exchange.
The theft itself happened Thursday. According to the reporting, $6.3 billion in bitcoin and other digital currency was taken from Binance, the world's largest crypto exchange. Several crypto experts said at the time that the attack bore the hallmarks of a North Korean hack, an assessment the FBI's statement now formalizes.
The bureau's attention has shifted to what happens to the money next. Its investigation found that TraderTraitor was converting the stolen assets primarily into ethereum. The FBI expects the group will now try to convert those assets using DeFi, short for decentralized finance, and what it called "instant swap services." It asked crypto exchanges, blockchain analytics companies and others to block transactions linked to various addresses, so the money cannot be laundered in a way that hides where it came from.
Ari Redbord, chief policy officer at the blockchain intelligence firm TRM Labs, said he expects the hackers to break the stolen assets into pieces and try to launder them through smaller exchanges to avoid detection. He said that process could unfold over months. "It's bank robbery, in this case, at the speed of the Internet," he said. But he added that the same technology cuts the other way: "we can also track and trace those funds in real time in order to build investigations, to disrupt and to seize back funds." He summed it up as "just this cat and mouse game."
For Binance's customers, the more immediate question is whether they will be made whole. The company said Saturday that it had enough set aside, in the same digital currency that was stolen, to cover 90% of the missing assets. It promised customers would be fully reimbursed.
What to watch now is twofold: whether exchanges and analytics firms act on the FBI's request to block the flagged addresses, and how much of the stolen ethereum investigators can trace and freeze as it moves through swap services and smaller exchanges over the coming months.
Vuoi la storia completa?
Leggi l'originale su WDIV ClickOnDetroit ↗
Technology