Binance's $6B North Korean Hack: Feds Freeze $2.7B, Exchange Covers All Losses

Massive North Korean Hack Hits Binance

In one of the largest cryptocurrency thefts on record, North Korean military hackers stole over $6 billion from Binance on October 29. The attack, attributed to the group "TraderTraitor," has prompted a swift response from U.S. authorities and the exchange.

Feds Freeze $2.7 Billion

The Justice Department announced Thursday that federal authorities and private-sector partners have frozen more than $2.7 billion in stolen cryptocurrency. Additionally, officials have obtained court authorization to seize or restrain over $1.2 billion of those assets as investigations continue.

"By springing into action at a moment's notice, we worked together to freeze this massive criminal fraud in its tracks," said U.S. Attorney Jeanine Ferris Pirro.

Binance Covers All Losses

Binance has fully covered the assets affected by the breach, which had an estimated total impact of approximately $6.3 billion. The exchange published an updated Proof of Reserves snapshot and assured users that no customer funds would be lost.

"To our users and community: thank you for your patience and understanding," Binance wrote on X.

Binance co-CEO Richard Teng previously told FOX Business that the company had closed the entry points exploited by the hackers and rebuilt affected systems.

How the Attack Unfolded

The attack began with a fraudulent job interview that compromised an employee's computer. Hackers then exploited internal systems to execute unauthorized transactions. According to the Justice Department, the hackers have continued attempting to move stolen funds through cryptocurrency exchanges, bridges, and mixing services to obscure their tracks.

North Korea's Cyber Warfare

The theft is part of a broader pattern of North Korean cyber operations. The Justice Department also announced the disruption of a separate hacking operation called "FaceStealer," linked to over $400 million in cryptocurrency thefts over the past 18 months.

Using deceptive video calls, secretly recorded webcam footage, and AI-generated deepfakes, the FaceStealer operation tricked victims into installing malicious software. The FBI warned that these schemes increasingly target not only cryptocurrency investors but also developers who maintain open-source software, potentially exposing broader technology systems.

The Bottom Line

While the frozen funds represent a significant victory for law enforcement, the sheer scale of the Binance hack underscores the growing threat of state-sponsored cybercrime in the cryptocurrency space. Binance's decision to cover all losses aims to maintain user trust, but the incident serves as a stark reminder of the security challenges facing the industry.