Key Highlights:
- Massive Heist: Over $6.3 billion in crypto funds were stolen from Binance, marking the largest cryptocurrency theft in history.
- North Korean Link: Blockchain analysts TRM Labs and Chainalysis have attributed the attack to “TraderTraitor,” a North Korean hacking unit, with “high confidence.”
- Market Shockwave: The news sent ripples through the market, causing Bitcoin to tumble 4% and Ethereum to drop 6%.
- Recovery Efforts: Binance has begun recovering assets, freezing roughly $3 billion and reserving over $6.3 billion of its own funds to cover user losses.
The cryptocurrency world is reeling after the world’s largest exchange, Binance, suffered what analysts are calling the biggest crypto heist in history. Over $6.3 billion in digital assets were stolen in a complex attack that has been linked with “high confidence” to hacking units affiliated with North Korea.
According to blockchain intelligence firm TRM Labs, the attack was orchestrated by “TraderTraitor,” an elite hacking group believed to be part of the notorious Lazarus Group. The firm stated that several features of the attack matched previous North Korea-linked heists, including the massive Bybit hack in February 2025. Chainalysis, another leading blockchain analysis company, echoed this assessment, with co-founder Jonathan Levin noting that the Democratic People’s Republic of Korea (DPRK) was “up to their old tricks.”
The scale of the breach is staggering. TRM reported that the attacker moved approximately $6.36 billion out of Binance wallets across 10 different blockchains, with most of the funds being siphoned out within a mere 20 minutes. This figure dwarfs the $1.5 billion Bybit hack earlier this year, making it roughly four times larger than any previous crypto theft on record.
Binance has acknowledged the incident, describing it as a “complex attack” on its funds. In a statement, the exchange assured users that it is working with blockchain partners, law enforcement, and industry experts to trace and freeze the stolen assets. The platform has already frozen around $3 billion in affected assets and has reserved over $6.34 billion of its own company funds to cover the incident, including $5 billion in the same token assets that were impacted.
“Binance has begun recovering affected assets for users and continues to work with law enforcement, issuers, blockchain intelligence firms, and industry partners to trace, freeze, and recover additional funds,” the company stated.
The news sent shockwaves through the financial markets, triggering a sharp sell-off. Bitcoin tumbled 4% to $77,465, while Ethereum and BNB, Binance’s native token, fell 6% and 1% respectively.
This attack adds to a long and troubling history of North Korean involvement in cybercrime. TraderTraitor was famously accused of hacking Sony Pictures in 2014 and, more recently, was held responsible by the FBI for the Bybit hack. The group is believed to use these stolen funds to finance the North Korean regime.
As the investigation continues, the crypto industry is left grappling with the security implications of this unprecedented breach. For now, all eyes are on Binance and international law enforcement to see if any of the billions in stolen funds can be recovered, and how the global crypto landscape will respond to such a monumental security failure.
