North Korean Hacking Unit Linked to Major Binance Cyber Heist
A detailed report from a U.S.-based blockchain intelligence company has identified a North Korean hacking unit as the likely perpetrator behind a cyberattack that affected Binance, the world’s largest cryptocurrency exchange. The hack has led to the loss of over $6 billion in assets.
Binance Takes Immediate Action
In response to the breach, Binance announced that it collaborated with blockchain partners to freeze approximately $3 billion in the compromised assets. As of Friday, the exchange has initiated the process of asset recovery for its users. Deposits on the platform have been unaffected, whereas withdrawals are currently suspended and are anticipated to resume within the next day or two. Binance has committed to covering all losses incurred by its users.
Investigation Highlights Multiple Breaches
The company revealed via its social media channels that initial investigations pointed to a compromised laptop, but further inquiries indicated multiple points of breach within their system.
Role of North Korea’s Hacker Unit
In a statement on its website, blockchain intelligence firm TRM attributed the attack to an elite hacking group known as TraderTraitor, affiliated with North Korea. “We make this judgment with high confidence,” TRM asserted. During the incident, an estimated $6.36 billion was siphoned from Binance wallets across ten different blockchains, marking this as potentially the largest theft in cryptocurrency history.
Previous Incidents and Patterns
In February 2022, another exchange, Bybit, fell victim to a hacking incident that resulted in $1.5 billion in losses. The FBI confirmed North Korea’s involvement in that attack as well. TRM noted several similarities between the Binance incident and earlier North Korean hacks, including the Bybit breach.
Community and Expert Reactions
Blockchain analysis firm Chainalysis also reached a similar conclusion regarding the involvement of the TraderTraitor group in the Binance breach. On social media, co-founder and CEO Jonathan Levin commented that the incident appeared to be linked to North Korean hackers.
When asked about the potential North Korean ties, a Binance spokesperson indicated that the company is working closely with law enforcement to verify the identities of those responsible and ensure justice is served.
Broader Implications of Cybercrime
Experts suggest that North Korea has increasingly turned to cyber hacking as a means to generate foreign currency in light of stringent U.N. sanctions that have strained its economy and impacted its nuclear program.
Historical Context of Crypto Theft by North Korea
According to South Korea’s intelligence agency, North Korean hackers have reportedly pilfered around 1.5 trillion won (approximately $1.1 billion) from cryptocurrency and virtual asset exchanges over the past five years, with more than half of this amount stolen in 2022 alone. This assessment positions North Korea as one of the top entities globally in digital asset theft.
Changpeng Zhao’s Leadership and Accountability
Binance, founded by Changpeng Zhao in 2017, has faced scrutiny in the past. Zhao pleaded guilty to a felony related to anti-money laundering compliance and stepped down as CEO in 2023, although he was pardoned by former U.S. President Donald Trump in 2025. Zhao reassured users via social media that their funds are secure while recognizing the seriousness of the breach, noting that the incident appears to indeed be a hack.
Concerns Over Security Measures
The breach has raised questions about the effectiveness of Binance’s security protocols. Kok Tin Gan, co-founder and CEO of cybersecurity firm NyxLab, criticized the lack of stringent approval methods, indicating that the breach may have stemmed from a singular signature granting extensive access to the Binance hot wallet.
In its defense, Binance stated that no evidence of a private key leak has been uncovered and pledged to release additional technical details following the completion of their investigation.
Discussion about this post