TRM Labs links North Korean unit TraderTraitor to Binance breach

Binance confirmed that hackers stole approximately $6.3 billion in digital assets in a breach the company attributed to compromised internet-connected wallets. The exchange has reserved more than $6.34 billion in company funds to cover the losses, including $5 billion already held in the stolen cryptocurrencies, according to a report from Fox Business.

Binance reserves $6.34 billion to cover theft

The world’s largest cryptocurrency exchange pledged to absorb the financial impact of the theft so that users do not bear the losses. To replace the remaining affected assets, Binance is purchasing additional tokens through over-the-counter and market transactions.

Binance founder Changpeng Zhao stated the security incident appeared to be a hack and expressed gratitude to other cryptocurrency firms that helped freeze assets. The exchange temporarily suspended withdrawals to conduct security checks.

Binance Cyberattack Linked to North Korea's TraderTraitor Hacking Group, TRM Labs Says | NewsX

Initial investigations pointed to a compromised laptop, though subsequent findings revealed further points of intrusion. Binance stated that while wallets were compromised, there is no evidence that wallet private keys were leaked.

Asset Recovery Status: Binance reported that approximately $3 billion in stolen assets have been frozen on-chain through industry partnerships.

North Korean unit TraderTraitor linked to breach

Blockchain intelligence firm TRM Labs attributed the attack to TraderTraitor, a hacking unit sponsored by the North Korean state. TRM Labs stated this assessment was reached with high confidence using off-chain and on-chain intelligence.

The attackers moved roughly $6.36 billion out of Binance wallets across 10 different blockchains. Most of these assets were transferred in approximately 20 minutes.

$6.3 Billion Crypto Heist: Hackers Breach Binance, North Korea Role 'Exposed' | Vantage

President Donald Trump confirmed his administration is investigating whether North Korean hackers were responsible. Speaking in the Oval Office, Trump noted he has always felt digital currencies were “a little bit dangerous.”

Secret Service coordinates to recover stolen funds

The U.S. Secret Service is working with private-sector partners, including Circle, to identify and recover the stolen funds. A spokesperson for the agency confirmed they are coordinating with the U.S. Attorney’s Office for the District of Columbia and other law enforcement partners to find those responsible.

North Korean Hackers Steal $6.3 Bn in Lightning-Fast Theft | Is Crypto Really Unhackable? | GRAVITAS
Detail Amount/Status
Total Stolen Assets ~$6.3 Billion
Binance Reserve Fund $6.34 Billion
Assets Frozen On-Chain ~$3 Billion

Theft damages Binance credibility as AI risks grow

Eric Schiffer, chairman of Patriarch and Reputation Management Consultants, described the incident as one of the greatest thefts of all time. In an interview with Fox Business, Schiffer warned that the scale of the theft signals a broader wave of sophisticated attacks, particularly as artificial intelligence grows more powerful.

Schiffer predicted that while Binance’s balance sheet allows it to recover financially, the hit to its credibility will be significant. He suggested the company may lose a substantial number of asset holders.

North Korean Hackers Linked to $6.3 Billion Binance Theft

Did you know? Schiffer recommended that investors evaluate if they trust the brands holding their assets or consider alternatives like exchange-traded funds (ETFs) rather than holding crypto directly on exchanges.

Binance Security Questions

Will users lose money in the Binance hack?
No. Binance stated it will absorb the financial impact of the stolen funds and has reserved $6.34 billion to cover the losses.

How did the hackers gain access to the funds?
Binance reported that internet-connected wallets were compromised, with initial findings pointing to a compromised laptop and other points of intrusion.

Who is investigating the theft?
The U.S. Secret Service, the U.S. Attorney’s Office for the District of Columbia, and the Trump administration are all involved in the investigation.

The U.S. government has not yet officially confirmed if the North Korean state is responsible, though TRM Labs maintains high confidence in that attribution.