Overview
- U.S. law enforcement publicly named a North Korea‑linked group called TraderTraitor as responsible for the $6.3 billion theft from Binance and released wallet addresses tied to the transfers.
- Blockchain analysis firms produced corroborating traces that show much of the stolen crypto being converted into Ethereum, a step that investigators say helps map and block the funds.
- Binance temporarily halted activity after the theft, has resumed trading, and says it covered roughly 95 percent of the loss from its reserves while customer withdrawals have begun to stabilize.
- The FBI and regulators have urged exchanges worldwide to block the listed wallets and transactions, and President Trump said the U.S. is still learning about the incident.
- North Korea, through Kim Yo Jong and state media, has rejected the charge as a political provocation, a response that raises the risk of the theft becoming a diplomatic and policy flashpoint over seizure and recovery of crypto assets.