F.B.I. Attributes Record $6 Billion Binance Hack to North Korean Unit TraderTraitor

The F.B.I. has officially identified the North Korean hacking group TraderTraitor as responsible for a massive cyberattack on Binance, resulting in the theft of approximately $6 billion in cryptocurrency. While Pyongyang denies the allegations as political provocation, security experts note that such heists have become a primary revenue source for the regime's military and nuclear programs.

The Federal Bureau of Investigation stated on Saturday that North Korea was behind the hacking attack on Binance earlier this week, marking the first official acknowledgment of the regime's involvement in what is now considered the largest cryptocurrency heist in history. The incident resulted in hackers stealing approximately $6 billion from the world's largest crypto exchange, a sum that would represent the most significant theft attributed to North Korean cybercrime in years.

Despite being a poor and heavily sanctioned nation, North Korea has cultivated an elite force of hackers capable of executing billion-dollar operations. Security officials have long warned that these cyberattacks are growing increasingly sophisticated, with the stolen funds used to support the country's military and nuclear-weapons programs. A United Nations panel reported in 2024 that such cyber activities generated roughly half of the regime's foreign currency income, amounting to billions in revenue.

The F.B.I. specifically accused the North Korean hacking unit known as TraderTraitor of carrying out the Binance attack. Crypto research firms noted that the operation utilized asset laundering patterns previously unseen in the industry. The bureau also observed actors from this group converting the stolen assets into Ethereum following the breach.

Binance initially suggested that hackers may have compromised an engineer's laptop to facilitate unauthorized withdrawals, but a Friday update indicated the company had identified additional points of entry. In response to the accusations, North Korea has denied any involvement. Kim Yo-jong, sister of leader Kim Jong-un, dismissed the claims as a "political provocation" in commentary published Tuesday in state media. She further accused the United States of attempting to unfairly sway international public opinion against her country, which has historically never claimed responsibility for major cyber heists.

Experts agree that North Korea is now one of the most capable and significant cyber threats globally. Powered by a pipeline of top-tier programming students, the regime's hacking units have spent years penetrating banks and corporations while capitalizing on the rise of cryptocurrency markets.

Sources: The New York Times World.

Related articles