FBI attributes $6.3 billion Binance hack to North Korean cyber group

The Federal Bureau of Investigation revealed in a statement Saturday that Thursday's massive heist from Binance, the world's largest cryptocurrency exchange, bears the fingerprints of the same North Korean cyber actors responsible for a $1.5 billion breach of crypto platform Bybit last year. The attack represents the largest cryptocurrency theft on record, with digital assets stolen in what security experts characterize as a sophisticated, coordinated operation. The FBI has attributed the malicious activity to TraderTraitor, a designation used by U.S. authorities to identify the cyber group's operations.

Investigators determined that stolen assets are being converted primarily into ethereum, one of the most widely traded cryptocurrencies. The agency has warned that TraderTraitor is likely to employ decentralized finance platforms and instant swap services to move funds further, complicating efforts to trace the money's origins and movement across blockchain networks.

In response, the FBI has called on cryptocurrency exchanges, blockchain analytics firms, and financial institutions to coordinate efforts in blocking transactions linked to identified wallet addresses associated with the heist. The directive aims to prevent the laundering of stolen funds and disrupt the actors' ability to convert illicit assets into usable capital. Authorities have also begun tracking the movement of digital currencies across various blockchain platforms to identify and intercept subsequent transactions tied to the North Korean operation.