North Korean Hackers Suspected in Binance Cyberattack

A massive cyberattack on Binance has led security researchers to suspect that North Korean hackers are responsible for stealing a record-breaking $6.3 billion in cryptocurrency from the exchange's wallets.

The breach, which is reportedly the largest known theft of crypto in history, is still ongoing and its resolution remains unconfirmed. The amount of stolen crypto may change as it travels across various blockchains.

Binance has revealed that the hackers gained access to the company's network by targeting a compromised laptop belonging to one of its engineers. This allowed them to submit unauthorized withdrawal transactions, which ultimately led to the massive theft.

The exchange claims that there is no evidence of a leak of its private keys, which would grant the hacker near-unfettered control over Binance's crypto stores. However, this assertion has not been independently verified.

Binance has suspended all deposits and withdrawals while it continues its investigation into the breach, with user funds supposedly safe despite the exchange's failure to provide immediate proof of this claim.

The investigation into the massive Binance breach is still underway, but one thing is clear: the hack was likely facilitated by a compromised employee laptop.

Security experts point out that software vulnerabilities can be exploited through various means, including open-source projects that hackers often target and modify to steal sensitive data from devices. This can happen even if the affected software appears legitimate on the surface.

Binance's security protocols have come under scrutiny in light of this breach, with many wondering how a single employee's laptop was able to access systems controlling billions of dollars in funds.

The company has yet to provide a detailed explanation for its security measures or whether it had conducted any recent security audits prior to the hack.

Security researchers at TRM Labs have attributed the breach to North Korean hackers, describing it as the "largest hack in history".

A network of hackers known as TraderTraitor has been identified by researchers as a North Korean cell focused on stealing cryptocurrency from large companies and exchanges.

This group was also linked to the second-largest heist on record, a $1.4 billion theft from crypto exchange Bybit in 2025, further solidifying its reputation as a skilled and prolific cybercrime operation.

According to TRM Labs, the Binance breach took approximately 20 minutes to carry out, demonstrating the hackers' speed and efficiency in executing the heist.

Blockchain security firm Elliptic also attributed the Binance theft to North Korean hackers, noting that some of the stolen funds ended up in a wallet previously used in a cyberattack on crypto exchange Bitget earlier this year, where $351 million was stolen.

The U.S. government and its allies have long warned about the threat posed by North Korea's cybercrime activities, which are seen as a means to generate revenue for the country's ongoing development of nuclear weapons despite being cut off from international financial systems.

North Korean hackers have been accused of orchestrating a massive breach at cryptocurrency exchange Binance, resulting in a staggering loss of $6.3 billion.

The cyberattack is believed to have exploited vulnerabilities in Binance's systems, allowing the perpetrators to make unauthorized withdrawals from user accounts. This brazen heist has sent shockwaves through the global financial community and raises serious concerns about the security of cryptocurrency exchanges. The scale of the breach is unprecedented, with reports suggesting that it could be one of the largest ever recorded.

The incident highlights the growing threat posed by North Korea's cybercrime activities, which are seen as a means to generate revenue for the country's ongoing development of nuclear weapons and other military programs.