Skip to main content
BitCurrent

Crypto markets, protocols and policy

FBI attributes $6bn-plus Binance theft to North Korea

The FBI attributed Binance’s theft of more than $6 billion to North Korea’s TraderTraitor, while tracing funds into ether and urging firms to block laundering routes.

BitCurrent Newsroom2 min read

FBI attributes $6bn-plus Binance theft to North Korea

The FBI attributed the theft of more than $6 billion from Binance to North Korea, naming the activity TraderTraitor and urging crypto firms to block linked transactions. The theft took place on or about October 29 and ranks among the largest crypto heists on record, according to the Associated Press.

  • More than $6 billion in virtual assets stolen
  • October 29: approximate date of the theft
  • October 31: FBI attribution announcement
  • 90%: stolen assets Binance said it had set aside to cover

What did the FBI attribute to TraderTraitor?

The FBI said North Korea was responsible for the theft from Binance and identified the activity as TraderTraitor. In its October 31 notice, the bureau said it was working with the U.S. Secret Service and IRS Criminal Investigation to track the stolen assets.

The FBI said the actors had converted the assets primarily into ether (ETH). It expects them to use decentralized finance services and instant swaps to move the funds through further laundering stages.

What is the FBI asking crypto firms to do?

The bureau and its partners urged node operators, instant exchanges, DeFi services, blockchain analytics firms and other virtual-asset businesses to block transactions connected to addresses linked to the theft. The FBI published wallet addresses it said were holding or had held stolen assets.

The request reflects the immediate challenge: tracing funds does not by itself prevent them from moving through other services. The Associated Press reported that Binance said it had set aside enough of the same digital assets to cover 90% of the missing funds and would fully reimburse customers.

What remains unknown about the breach?

The FBI notice names the responsible actors and describes the laundering activity it observed, but does not explain how the attackers gained access or how the theft was carried out. The full amount ultimately recovered also remains open.

Source material