On a weekend in early November, the United States government gave a name to the thieves behind one of the largest losses the digital economy has ever absorbed. The FBI attributed the theft of roughly $6.3 billion from the exchange Binance to TraderTraitor, a North Korean-linked group already held responsible for a $1.5 billion heist the year before. The episode reminds us how quickly value can now cross borders and vanish into code, and how much of the recovery depends on strangers acting in time to stop it.
FBI Attributes Record $6.3 Billion Binance Theft to North Korean Hackers Linked to Bybit Heist
Billions taken within a matter of minutes
Mark
Why does the FBI naming TraderTraitor matter beyond the headline number?
Mimi
Because it links this to the Bybit hack last year, $1.5 billion by the same group. It reads as a pattern, not a one-off.
Luke
Worth noting the pattern comes from the FBI's attribution. The source doesn't lay out the evidence behind it, only that experts saw hallmarks of North Korean hacking.
Mark
What is the FBI asking others to do?
Mimi
Exchanges and blockchain analytics firms are asked to block transactions tied to flagged addresses, so the money can't be laundered.
Luke
It's a request, not an order. We don't know yet how many companies will comply or how many addresses are on the list.
Mark
And the ethereum detail?
Mimi
The FBI says the thieves are mainly converting into ethereum, and it expects them to turn to DeFi and instant swap services next.
Luke
That's an expectation, a forecast. Nothing in the reporting says it has already happened.
Mark
What about customers?
Mimi
Binance says it holds enough of the stolen currency in reserve to cover 90 percent, and promises full reimbursement.
Luke
Which leaves the other 10 percent unexplained. The promise is stated, but the how and when are not.
El Pulso
- A single Thursday morning drained billions in digital currency from the world's largest crypto exchange, and the shock is still spreading through markets and customer accounts.
- The FBI has publicly tied the attack to TraderTraitor, the same group behind the 2025 Bybit hack, turning a suspicion into a formal accusation.
- Exchanges, blockchain analytics firms and other platforms are being urged to freeze flagged addresses before the stolen funds disappear into laundering channels.
- The thieves are reportedly converting their haul into ethereum, with DeFi platforms and instant swap services now the likely routes for moving it.
- Binance says reserves cover 90 percent of the missing assets and promises full reimbursement, but how the remaining 10 percent will be met remains unclear.
On a weekend in early November, the United States government gave a name to the thieves behind one of the largest losses the digital economy has ever absorbed. The FBI attributed the theft of roughly $6.3 billion from the exchange Binance to TraderTraitor, a North Korean-linked group already held responsible for a $1.5 billion heist the year before. The episode reminds us how quickly value can now cross borders and vanish into code, and how much of the recovery depends on strangers acting in time to stop it.
On Saturday, the FBI announced from New York that North Korean hackers were behind the attack on Binance, the world's largest crypto exchange. The theft took place on Thursday, and in a matter of minutes, about $6.3 billion in bitcoin and other digital currency was taken. Crypto experts had suspected a North Korean operation from the start, and the bureau's statement now confirms it.
The FBI linked the attack to an entity called TraderTraitor, the same group it held responsible for last year's Bybit hack, which took $1.5 billion. By the bureau's account, this new theft is roughly four times larger and was carried out by the same actors. The statement was also a request for action: exchanges, analytics firms and others were asked to block transactions tied to a set of flagged addresses, so the money cannot be laundered and made untraceable.
Investigators say the thieves have been converting the stolen assets mainly into ethereum, and they expect the group to push the funds through DeFi platforms and instant swap services. Binance, meanwhile, has set aside reserves covering 90 percent of the missing assets and promised customers full reimbursement, though the source does not explain how the rest will be covered or when. What happens next depends largely on speed: whether the flagged addresses are frozen in time, and whether Binance delivers on its promise.
On Saturday, the FBI put a name to the group behind what it calls the largest crypto theft ever recorded. In a statement issued from New York, the bureau said North Korean hackers were responsible for the attack on Binance, in which billions of dollars were taken within a matter of minutes earlier in the week.
The theft happened on Thursday. According to the source reporting, $6.3 billion in bitcoin and other digital currency was stolen from Binance, the world's largest crypto exchange. Several crypto experts said at the time that the attack bore the hallmarks of a North Korean operation, an assessment the FBI's statement now backs with a formal attribution.
The bureau tied the attack to "malicious cyber activity" by an entity known as TraderTraitor. That is the same group it identified as responsible for the Bybit hack last year, which took $1.5 billion. By the FBI's account, the Binance theft is therefore roughly four times the size of that earlier heist, carried out by the same actors.
The statement was not only an attribution but also a request for help. The FBI asked crypto exchanges, blockchain analytics companies and other parties to block transactions linked to a set of addresses it flagged. The aim is to keep the stolen money from being laundered, a process that disguises where funds came from and makes them far harder to trace or recover.
The bureau also described what its investigation had found about the thieves' next steps. TraderTraitor, it said, was converting the stolen assets primarily into ethereum. The FBI expects the group will now try to move the funds through DeFi platforms and what it called "instant swap services," channels that can turn one asset into another quickly.
Binance, for its part, spoke on Saturday about what the loss means for its customers. The company said it had set aside enough of the same digital currency that was stolen to cover 90 percent of the missing assets. It promised that customers would be fully reimbursed. The source does not say how the remaining 10 percent will be covered or on what timeline reimbursement will occur.
What comes next is largely a matter of speed. Whether exchanges and analytics firms act on the FBI's request to block the flagged addresses, and whether the stolen funds can be intercepted before they pass through DeFi and swap services, will shape how much is ever recovered. Binance's follow-through on full reimbursement is the other thing to watch.
Citas Notables
The attack was tied to "malicious cyber activity" by an entity known as TraderTraitor.— FBI statement
Binance promised that customers would be fully reimbursed.— Binance, Saturday
Quieres la nota completa?
Lee el original en Daily Excelsior ↗
Technology