Overview
- Hackers tied by the FBI to a North Korea-linked group called TraderTraitor drained about $6.3 billion from Binance hot wallets in a fast, multistage operation that began with a fake job interview and a malicious coding test.
- U.S. authorities and private partners have frozen more than $2.7 billion of the stolen assets and obtained court authorization to seize or restrain over $1.2 billion as investigators continue to trace funds across thousands of wallets and multiple blockchains.
- Separately, the DOJ and FBI seized cloud infrastructure used in a social‑engineering scheme called FaceStealer that used secretly recorded webcam videos and AI deepfakes to steal more than $400 million and collected over 900 victim recordings.
- Binance says it rebuilt affected wallet systems, tightened device and access controls, and used company reserves to cover the assets taken in the Oct. 29 breach so customers will not lose funds.
- Security firms and prosecutors warn the attacks expose weak internal controls at exchanges and growing supply‑chain risk to open‑source developers, prompting calls for standardized cybersecurity rules and closer cooperation with stablecoin issuers to limit rapid cross‑chain laundering.