
North Korea has been linked to what could become the largest financial theft in history after hackers stole approximately $6.3 billion (£4.7 billion) from Binance, the world’s largest cryptocurrency exchange.
The attack, which reportedly unfolded within just 20 minutes, has triggered an emergency response from Binance as it works to trace and recover the stolen digital assets.
Blockchain intelligence firms, including TRM Labs and Chainalysis, have pointed to North Korea’s state-backed hacking group, TraderTraitor, as the likely culprit behind the operation.
According to investigators, the hackers exploited weaknesses in Binance’s transaction approval systems, allowing them to execute unauthorised withdrawals from the exchange’s wallets. An initial investigation suggested that a compromised employee laptop may have played a role in the breach.
Following the incident, Binance temporarily suspended customer withdrawals while its security teams worked to secure its systems and investigate the attack. Deposits were reportedly unaffected.
The exchange said approximately $3 billion of the affected assets had been located and frozen through cooperation with blockchain partners and cryptocurrency companies.
Binance also assured customers that their funds would be protected, pledging to cover all losses using its emergency Secure Asset Fund for Users (SAFU) and company resources.
The breach has sent shockwaves through the cryptocurrency market, with Bitcoin and other major digital currencies recording declines as investors reacted to the news.
North Korea has repeatedly been accused of using sophisticated cyberattacks to steal cryptocurrency and generate funds. However, Binance has yet to officially identify those responsible for the latest incident.
The investigation remains ongoing as authorities and blockchain security firms work to trace the remaining assets and establish how the attackers gained access to the exchange’s systems.