Skip to main content
BitCurrent

Crypto markets, protocols and policy

FBI attributes $6bn Binance theft to North Korea’s TraderTraitor

The FBI linked Binance’s theft of more than $6 billion to North Korea’s TraderTraitor, and urged crypto firms to block wallets as laundering continues.

BitCurrent Newsroom2 min read

FBI attributes $6bn Binance theft to North Korea’s TraderTraitor

The FBI has attributed more than $6 billion stolen from Binance to North Korea, naming the operation TraderTraitor and warning that the funds are being laundered. The theft, reported by Binance on Oct. 29, is described by the Associated Press as the largest cryptocurrency heist on record.

  • More than $6 billion in virtual assets stolen, according to the FBI’s Oct. 31 alert.
  • Oct. 29: the approximate date of the theft cited by the FBI.
  • 90%: the share of missing assets Binance said it had set aside in the same cryptocurrencies, according to the Associated Press report.

What did the FBI attribute to TraderTraitor?

The FBI said North Korea was responsible for the theft and used “TraderTraitor” to describe the cyber activity. The agency did not provide a technical account of how the attackers accessed the assets in its alert.

The attribution follows a series of major crypto thefts linked to North Korean actors. AP reported that TraderTraitor was also tied to last year’s $1.5 billion Bybit hack.

Where are the stolen assets moving?

The FBI, working with the U.S. Secret Service and IRS Criminal Investigation, said it had observed the attackers converting the stolen assets primarily into Ether. It expects them to use decentralized finance services and instant swaps for further laundering.

The agencies urged exchanges, DeFi services, blockchain analytics firms and other virtual asset providers to block transactions connected to addresses listed in the FBI notice. Blocking those routes could disrupt laundering, but the alert does not say how much of the stolen crypto has been recovered.

Does Binance’s reserve cover mean the funds are recovered?

No. AP reported that Binance said it had enough of the same digital currencies set aside to cover 90% of the missing assets and promised to reimburse customers in full. That addresses customer losses; it does not establish that the stolen funds have been traced or returned.

The FBI’s notice confirms an attribution and outlines an expected laundering path. How much of the assets can be intercepted, and whether they can be recovered, remains open.

Source material