Politics · Developing story
FBI blames North Korea for $6.3 billion Binance crypto hack
NewsAgo briefing
The clear picture
What happened
The FBI says North Korean-linked TraderTraitor was responsible for a $6.3 billion theft from cryptocurrency exchange Binance. Binance said it would begin restoring withdrawals after suspending them during the incident, according to France 24 and The Guardian.
Latest development
CISA identifies TraderTraitor as a North Korean state-sponsored group associated with cryptocurrency theft and cyberattack activity since at least 2020, Euronews reports.
Why it matters
Binance says it has covered 90% of the losses and is restoring withdrawals, making the exchange’s ability to complete that process central to the immediate effects on its users.
Known / unclear
Coverage expanded from 7 to 8 attributed publishers.
The accounts do not establish how the attackers breached Binance, how much of the stolen cryptocurrency has been recovered, or how Binance will resolve losses beyond the 90% it says is covered.
NewsAgo wrote this briefing with an AI language model, using only the attributed reports listed below. Automated checks require every point to cite one of those reports and reject generic or unsupported text. How we use AI
Sources
Compiled from 8 independent publishers Euronews · DW · France 24 · The Guardian · Al Jazeera · CBS News · NPR · PBS NewsHour
The FBI attributes the attack to TraderTraitor, while CBS News characterizes North Korean responsibility as likely based on an assessment by a blockchain intelligence firm; the accounts therefore differ in the authority and certainty behind the attribution.
- EuronewsFBI blames North Korea for $6.3 billion Binance crypto hack ↗
- DWFBI says North Korea behind $6 billion Binance crypto theft ↗
- France 24Binance resumes crypto withdrawals after major hack blamed on North Korea ↗
- The GuardianBinance says 90% of losses from $6.3bn hack covered as FBI says North Korea behind attack ↗
- Al JazeeraFBI blames North Korea for record $6.3bn crypto heist from Binance ↗
- CBS News$6.3 billion Binance hack likely work of North Korea, experts say ↗
- NPRA simple explainer of the massive $6.3 billion crypto heist at Binance ↗
- PBS NewsHourWhat to know about the $6.3B hack on Binance, likely the biggest-ever crypto theft ↗
- France 24Binance hit by 6.3 billion dollar crypto theft ↗
The big question
How will Binance address the portion of losses not covered by its stated 90% figure?
The available accounts do not say how Binance will handle the remaining losses or whether it has recovered stolen assets.
What happens next
- Binance’s restoration of customer withdrawals after the suspension.
- Binance executives’ effort to recover funds from the $6.3 billion theft.
- Any further FBI or CISA statement on TraderTraitor’s role in the Binance attack.
Bottom line
The FBI attribution, coupled with CISA’s description of TraderTraitor, gives the Binance theft a more specific state-linked attribution than an assessment based solely on private-sector blockchain analysis.

Explore timelines and source history
Developing story: This developing story groups reporting from 8 publishers. The timeline shows how the coverage has changed.
What the coverage shows
Three or more independent publishers are reporting this development. Wording and emphasis may differ; open the source timeline to compare their reporting.
Compare the publisher timeline ↓Story evolution
- Headline updated
According to the CISA, TraderTraitor is a North Korean state-sponsored hacking group that has been associated with cryptocurrency thefts and cyberattack tactics since at least 2020.
8 sources at this update - Headline updated
The FBI said the theft was tied to "malicious cyber activity" by an entity known as TraderTraitor, the same actors behind a $1.5 billion Bybit hack last year.
7 sources at this update