The U.S. Federal Bureau of Investigation (FBI) has officially designated North Korea as the mastermind behind the Binance hack, which resulted in the theft of over $6.3 billion (approximately 8.4 trillion won) from the world’s largest cryptocurrency exchange.
FBI Officially Confirms North Korea’s Involvement
According to Reuters, Bloomberg, and other major outlets, the FBI released a statement on the 31st (local time) announcing that North Korea is responsible for stealing over $6 billion in cryptocurrency from Binance. While the involvement of North Korea had been heavily suspected since the incident, this marks the first official confirmation by U.S. authorities.
The FBI identified the perpetrator as ‘TraderTraitor,’ a notorious elite North Korean state-sponsored hacking organization. The bureau noted that it has detected activities showing these actors primarily converting the stolen assets into Ethereum (ETH).
Money Laundering Tactics and Asset Tracking
The FBI expects that additional money laundering will take place through decentralized finance (DeFi) platforms and instant exchange services to convert the stolen funds into other cryptocurrencies. To combat this, the FBI released a list of Ethereum, Bitcoin, and Solana wallet addresses associated with the hackers, urging the crypto community to block any transactions linked to or originating from these addresses.
The unprecedented breach occurred on the 29th of last month. Binance security teams in Abu Dhabi detected unauthorized outflows exceeding $1 billion and immediately escalated the issue. Despite deploying an emergency response team of around 100 executives, hackers managed to drain $6 billion across 10 blockchain wallets in just 20 minutes.
Current Status and Recovery Efforts
Following the theft, the attackers attempted to evade tracking by swapping stablecoins for Bitcoin and Ethereum, dispersing funds across multiple wallets through thousands of individual transactions. Blockchain analysis firm Chainalysis suggested that automated programs were likely used to complicate the funds’ transfer paths.
Although the crypto industry has moved to block suspicious transactions, TRM Labs estimates that the hackers still hold approximately $2.4 billion in digital assets. Binance issued a statement on the day of the incident acknowledging the breach, later announcing that it has replenished 90% of the stolen tokens and planned to resume withdrawal services.
