Binance suffers $6.3bn crypto heist, largest in history, linked to North Korea
The world's largest cryptocurrency exchange lost $6.3 billion in a hack attributed to North Korean group TraderTraitor, surpassing all previous theft records.
At a glance
- Binance lost $6.3bn in a hack attributed to North Korea's TraderTraitor group, the largest known theft in history.
- Attackers compromised an engineer's laptop to access hot wallets, not by cracking cryptographic keys.
- Binance pledges to cover all losses from its own reserves and froze about half the stolen funds.
Binance, the world's largest cryptocurrency exchange by daily trading volume, has been hit by a $6.3 billion heist that blockchain analytics firm Elliptic says is likely the single largest theft of any kind in recorded history. The attack, disclosed on October 30, has been attributed to TraderTraitor, a North Korean hacking unit linked to the regime's Reconnaissance General Bureau.
How the breach occurred According to Binance and Elliptic, attackers did not crack cryptographic private keys. Instead, they compromised a Binance engineer's laptop, gaining access to internal systems. From there, they manipulated the exchange's own systems to sign transactions that moved funds from "hot" wallets — those connected to the internet for quick withdrawals — to attacker-controlled addresses. More than $2.5 billion was taken in a single transaction.
North Korea's crypto campaign TraderTraitor emerged from the Lazarus Group, a hacking operation run by North Korea's military intelligence agency. The same unit was blamed for the $1.5 billion theft from Dubai-based Bybit exchange last year. Elliptic and two other analytics firms have traced some of the Binance funds to wallet addresses used in another recent exchange hack also linked to North Korea. Cybersecurity experts say the regime targets crypto because it is less regulated, easier to move, and easier to launder than traditional financial assets, providing a vital revenue stream for a sanctions-hit economy.
Customer protections and recovery Binance has pledged to cover all losses from its own reserves and says it froze roughly half the stolen funds before they could be moved. However, crypto customers lack the government-backed deposit protections that cover bank deposits — up to £120,000 in the UK and $250,000 in the US. Those guarantees only apply if a bank fails, not if it is hacked while continuing to operate. In Australia, victims may claim a capital loss on tax returns with proof of theft, but most jurisdictions offer no formal recourse.
Source: The Guardian Business.
Questions and answers
- Who is behind the Binance hack?
- The attack has been attributed to TraderTraitor, a North Korean hacking unit linked to the regime's military intelligence agency.
- Will Binance customers get their money back?
- Binance says it will cover all losses from its own funds and has frozen roughly half the stolen assets.
- Are crypto deposits protected like bank deposits?
- No. Crypto users are not covered by government-backed deposit insurance schemes in the US, UK, or Australia.
Original reporting: The Guardian Business (theguardian.com)
binancenorth koreacrypto heisttrader traitorelliptic
