Politics · Developing story

FBI blames North Korea for $6.3 billion Binance crypto hack

8 sources

NewsAgo briefing

The clear picture

Medium confidence · 8 publishers

What happened

The FBI says North Korean-linked TraderTraitor was responsible for a $6.3 billion theft from cryptocurrency exchange Binance. Binance said it would begin restoring withdrawals after suspending them during the incident, according to France 24 and The Guardian.

Latest development

CISA identifies TraderTraitor as a North Korean state-sponsored group associated with cryptocurrency theft and cyberattack activity since at least 2020, Euronews reports.

Why it matters

Binance says it has covered 90% of the losses and is restoring withdrawals, making the exchange’s ability to complete that process central to the immediate effects on its users.

Known / unclear

Established

Coverage expanded from 7 to 8 attributed publishers.

Still unclear

The accounts do not establish how the attackers breached Binance, how much of the stolen cryptocurrency has been recovered, or how Binance will resolve losses beyond the 90% it says is covered.

NewsAgo wrote this briefing with an AI language model, using only the attributed reports listed below. Automated checks require every point to cite one of those reports and reject generic or unsupported text. How we use AI

Sources

Compiled from 8 independent publishers Euronews · DW · France 24 · The Guardian · Al Jazeera · CBS News · NPR · PBS NewsHour

Where sources differ

The FBI attributes the attack to TraderTraitor, while CBS News characterizes North Korean responsibility as likely based on an assessment by a blockchain intelligence firm; the accounts therefore differ in the authority and certainty behind the attribution.

The big question

How will Binance address the portion of losses not covered by its stated 90% figure?

The available accounts do not say how Binance will handle the remaining losses or whether it has recovered stolen assets.

What happens next

  • Binance’s restoration of customer withdrawals after the suspension.
  • Binance executives’ effort to recover funds from the $6.3 billion theft.
  • Any further FBI or CISA statement on TraderTraitor’s role in the Binance attack.

Bottom line

The FBI attribution, coupled with CISA’s description of TraderTraitor, gives the Binance theft a more specific state-linked attribution than an assessment based solely on private-sector blockchain analysis.

Image accompanying reporting about FBI blames North Korea for $6.3 billion Binance crypto hack
Image supplied by the lead publisher. Open the original reporting for full context and image credit.
Explore timelines and source history

Developing story: This developing story groups reporting from 8 publishers. The timeline shows how the coverage has changed.

What the coverage shows

Three or more independent publishers are reporting this development. Wording and emphasis may differ; open the source timeline to compare their reporting.

Compare the publisher timeline ↓

Story evolution

  1. Headline updated

    According to the CISA, TraderTraitor is a North Korean state-sponsored hacking group that has been associated with cryptocurrency thefts and cyberattack tactics since at least 2020.

    8 sources at this update
  2. Headline updated

    The FBI said the theft was tied to "malicious cyber activity" by an entity known as TraderTraitor, the same actors behind a $1.5 billion Bybit hack last year.

    7 sources at this update

Publisher timeline

Follow the developments

Get the next material update by email.

Choose major developments only for concise, relevant NewsAgo updates. Confirm by email; unsubscribe whenever you like.

No spam. You will first receive an email asking you to confirm.