Overview
- Hackers stole roughly $6.3 billion from Binance in a rapid, multi-chain operation that investigators say began with a compromised DevOps laptop and moved funds in about 20 minutes.
- The FBI publicly attributed the theft to a North Korea-affiliated group called TraderTraitor and published wallet addresses, prompting exchanges and issuers to block or freeze linked transactions.
- North Korea, through Kim Yo Jong and state media KCNA, formally denied the allegation and called the U.S. claim a "grave political provocation."
- Blockchain analysts and investigators have traced the flows through roughly 12,000 wallets and report about $2.8 billion has been frozen or seized while roughly $3.2 billion remains in linked addresses and laundering continues.
- Binance has used company reserves to restore about 90–95% of customer balances and has resumed withdrawals in phases, and the episode highlights how illicit crypto thefts can fund state priorities and complicate diplomacy and sanctions enforcement.