The FBI has accused North Korea of being behind a massive $6.3 billion cryptocurrency theft from Binance.
On Saturday, the FBI announced that a cybercriminal group called TraderTraitor, linked to North Korea, was responsible for stealing over $6 billion in digital assets from the exchange.
This incident raises serious concerns about the security of digital assets, marking it as one of the largest cryptocurrency heists ever.
FBI Links North Korean Hackers to Cybercrime
The FBI confirmed that the cybercriminal activity originated from North Korea.
Investigators identified the group as TraderTraitor.
They noted that the hackers began converting the stolen assets into Ethereum, a major cryptocurrency.
The FBI warned that there is a risk of further laundering the stolen assets through decentralized finance platforms and instant cryptocurrency exchanges.
The agency advised cryptocurrency exchanges, blockchain companies, and digital asset service providers to monitor any transactions related to the stolen funds.
Understanding the $6.3 Billion Crypto Heist
Binance first reported the breach on Thursday after detecting unauthorized withdrawals of their digital assets.
The hack was sophisticated, with reports indicating that the hackers used a compromised laptop and malware to erase evidence.
“The security incident involved several complex issues,” said Binance co-CEO Richard Teng.
Blockchain intelligence firms estimate that about $6.3 billion in digital assets were moved during this hack, making it one of the largest heists in cryptocurrency history.
Binance Replaces 90% of Stolen Assets
Binance announced that they have restored around 90% of the stolen assets using their own funds.
They stated that the tokens were purchased to ensure customers would not suffer financially.
However, this was only achievable for 90%, as the remaining 10% of assets were less liquid.
Binance committed to acquiring these tokens until they reach 100%.
The company utilized funds from their Secure Asset Fund for Users, Futures Insurance Fund, and corporate treasury to cover the losses.
Withdrawals Temporarily Paused
Binance paused customer withdrawals following the breach.
However, they have now indicated that withdrawals will resume on Sunday.
They also released an updated proof of reserves, allowing customers to verify that their assets are fully backed at least one-to-one.
Binance has assured customers that their funds are safe and that the company will absorb the financial loss.
TraderTraitor’s History of Major Crypto Thefts
TraderTraitor has been linked to other significant hacks in the past.
This group was previously accused of a $1.5 billion theft from Bybit in February 2025.
North Korean-related hacks have frequently targeted cryptocurrency exchanges for theft.
The latest incident has raised global concerns about the use of cybercrime for large-scale digital asset theft.
Growing Concerns Over Crypto Security Worldwide
The $6.3 billion incident highlights the vulnerabilities of large cryptocurrency exchanges, especially those managing substantial customer assets.
With the FBI’s warning, digital asset companies face increased pressure to identify suspicious wallets and prevent the movement of stolen funds.
Although Binance has replaced the majority of the stolen assets, the investigation remains ongoing.
This incident is likely to spark further discussions in the global cryptocurrency industry about cybersecurity, international cooperation, and enhanced security measures.