Overview
- Theft of more than $6.3 billion hit Binance in a fast operation on Friday that the FBI says took about 20 minutes and converted much of the loot into ethereum for laundering.
- Private forensics firms TRM Labs and Chainalysis independently linked the transfers to TraderTraitor, a North Korea‑linked hacking unit that U.S. investigators now name as the perpetrator.
- Binance temporarily halted withdrawals, then resumed them after saying it had restored roughly 90% of the stolen value and earmarked about $6.34 billion of corporate funds to cover losses so users would not be charged.
- Investigators face technical hurdles because the attackers used a compromised laptop, software that erases traces, and rapid cross‑chain swaps that make following and recovering funds difficult.
- Analysts say the raid fits a long pattern of North Korean groups using crypto theft to raise hard currency for sanctioned programs, a trend that will likely raise regulatory pressure on exchanges and spur further law enforcement tracing efforts.