Massive cryptocurrency heist linked to North Korea with $6.3 billion stolen from Binance
Binance has been hacked, resulting in a loss of $6.3 billion in digital assets, with some funds recovered and others still unaccounted for.
A massive cryptocurrency heist has been linked to North Korea after hackers made off with $6.3 billion in digital assets from Binance, the world's largest exchange. The hack is believed to be a record-breaking operation, surpassing a 2025 heist on Bybit that saw $1.5 billion stolen.
The attack was initially thought to have originated from an engineer's laptop being compromised, allowing unauthorized withdrawals. However, further investigation revealed that the breach was more widespread and complex than first suspected. Several analytics firms have now linked the hack to a North Korean hacking unit.
Binance has secured around half of the stolen funds, freezing $3 billion in digital assets. However, many of the remaining stolen assets are still in the hands of unidentified hackers. The exchange is working closely with law enforcement agencies, including the FBI and US Secret Service, to track down the stolen funds and bring the perpetrators to justice.
The US Secret Service has pledged to work around the clock to identify, freeze, trace, and recover the stolen funds. America's lead federal agency for investigating financial crimes has also vowed to identify the cybercriminals responsible and hold them accountable. Binance has assured its users that its US-facing exchange remains unaffected by the hack.
Binance's investigation into the hack has revealed a complex and sophisticated breach of security. The hackers used a self-destruct mechanism to erase any digital evidence as they carried out the heist, making it more challenging for the company to track their movements.
According to Binance co-CEO Richard Teng, the initial assessment suggested that one individual may have been responsible for the compromised laptop that was believed to be the entry point of the breach. However, further investigation has uncovered additional vulnerabilities that indicate a broader attack on the company's systems.
Teng also confirmed that the hackers employed a self-destruct mechanism to wipe out any digital tools and evidence left behind, hindering Binance's efforts to identify and track down the perpetrators.
The crypto industry is bracing itself for the potential fallout from Binance's massive $6.3bn loss in a recent hack linked to North Korea. The fear among users and experts alike is that Binance may not be able to cover this enormous financial loss.
Binance has repeatedly assured customers that their funds are safe, but some experts have cautioned against taking these promises at face value. They point out that the company's claims of being strong enough to weather the storm are eerily reminiscent of FTX CEO Sam Bankman-Fried's pre-collapse assurances in 2022.
Crypto history watchers are drawing comparisons between Binance's situation and the collapse of FTX, where customers were left with significant losses. Several experts have warned that Binance's promise to cover losses may not be legally binding, and that customers may need to pursue litigation to recover their funds.
Daniel Tunkel, a lawyer from Edwin Coe law firm, suggests that the outcome will depend on what is specified in customer contracts. He notes that if Binance fails to meet its obligations, customers may have grounds for suing the company.
The recent hack linked to North Korea has resulted in enormous losses for Binance, with $6.3bn stolen.
North Korean hackers have been responsible for numerous high-profile cyber attacks on the crypto industry over the past five years, according to investigators. These attacks are often attributed to the Lazarus Group, a cluster of cyber criminals accused of working directly for the regime. The group's activities have been closely monitored by Chainalysis, a leading crypto analytics firm.
Chainalysis has expressed "high confidence" that a North Korean is linked to the hack in question, further solidifying evidence pointing to the country's involvement in the attack. This is not an isolated incident, as North Korea is known for using cybercrime as a means of generating revenue due to its impoverished economy and heavy international sanctions.
The regime's reliance on hacking as a source of income has been extensively documented through cryptocurrency flow analysis and insider interviews from defectors, making it likely that North Korea is the only nation using hacking in this manner.
Facts based on reporting originally published by BBC News World.
You may republish this story, in full or in part, if you credit Noti Group and link to it (licence CC BY 4.0). Photos are not included.
