Today's cybersecurity headlines are brought to you by ThreatPerspective


Ethical Hacking News

FBI Blames North Korean Hackers for Record-Breaking $6.3 Billion Binance Crypto Heist


The Federal Bureau of Investigation (FBI) has officially pinned the blame for the largest cryptocurrency heist in history on a North Korean hacking operation, with a reported loss of $6.3 billion. The attack targeted the cryptocurrency exchange Binance, which has been struggling to recover from the loss.

  • The FBI has attributed the largest cryptocurrency heist in history to a North Korean hacking operation, resulting in a reported loss of $6.3 billion.
  • The attack targeted Binance, a leading cryptocurrency exchange, and was carried out by the Lazarus Group, a notorious cybercrime organization.
  • The attack was swift and efficient, with most of the stolen assets disappearing in just 20 minutes.
  • Binance is working to recover from the attack, but the process has been slow, and the exchange has committed billions of dollars from its own reserves to cover the losses.
  • The FBI's attribution of the attack to North Korea highlights the growing threat of state-sponsored hackers in the cybercrime landscape.
  • The Lazarus Group's involvement in the attack raises concerns about the group's ability to launder the stolen assets.
  • The incident highlights the need for greater vigilance and cooperation between exchanges, regulators, and law enforcement agencies to prevent similar attacks in the future.



  • The Federal Bureau of Investigation (FBI) has officially pinned the blame for the largest cryptocurrency heist in history on a North Korean hacking operation, with a reported loss of $6.3 billion. The attack, which occurred on October 29, targeted the cryptocurrency exchange Binance, a leading platform for buying, selling, and trading digital assets. According to the FBI, the perpetrators, known as TraderTraitor, are linked to the notorious Lazarus Group, a cybercrime organization with a history of high-profile attacks.

    The FBI's attribution comes after weeks of speculation and investigation, during which time blockchain intelligence firms TRM Labs and Elliptic had already linked the heist to North Korea. These firms reported that the majority of the stolen assets disappeared in just 20 minutes, highlighting the speed and efficiency of the cyberattack.

    The Lazarus Group, known for its expertise in cryptocurrency theft, has a long history of targeting high-value exchanges. The group's tactics, which include exploiting vulnerabilities in exchange systems and using fake job offers to trick employees into handing over access to their employers' systems, have been well-documented by cybersecurity experts.

    In this latest attack, the Lazarus Group compromised a DevOps engineer's laptop, which gave them access to a service container and allowed them to authorize withdrawals they had no business making. The attack was swift and efficient, with most of the stolen assets disappearing in a matter of minutes.

    Binance, which has been a popular platform for cryptocurrency trading, has been struggling to recover from the attack. The exchange has suspended customer withdrawals and has been working to replenish the stolen assets. However, the process has been slow, and the exchange has committed billions of dollars from its own reserves and emergency funds to cover the losses.

    The FBI's attribution of the attack to North Korea comes at a time when tensions between the United States and North Korea are already high. The attack is seen as a significant escalation of cyberattacks against the United States and its allies, and it highlights the growing threat of North Korean hackers in the cybercrime landscape.

    The Lazarus Group's involvement in the attack has also raised concerns about the group's ability to launder the stolen assets. The FBI has reported that the hackers have started swapping their loot for Ethereum, with investigators expecting them to move the funds through decentralized finance (DeFi) platforms and instant swap services to make the money harder to trace.

    The FBI's investigation into the attack is ongoing, and the agency is urging exchanges, blockchain analytics firms, and other virtual asset providers to block transactions involving the stolen funds. The agency has also published a list of cryptocurrency wallet addresses linked to the theft, in an effort to track the flow of the stolen assets.

    The attack on Binance is a significant reminder of the risks associated with cryptocurrency trading. While the exchange has been working to recover from the attack, the incident highlights the need for greater vigilance and cooperation between exchanges, regulators, and law enforcement agencies to prevent similar attacks in the future.

    The FBI's attribution of the attack to North Korea also highlights the growing threat of state-sponsored hackers in the cybercrime landscape. The Lazarus Group's involvement in the attack is seen as a significant escalation of cyberattacks against the United States and its allies, and it underscores the need for greater cooperation between countries to combat this growing threat.

    In conclusion, the FBI's attribution of the $6.3 billion Binance crypto heist to North Korean hackers is a significant development in the ongoing battle against cybercrime. The attack highlights the growing threat of state-sponsored hackers and the need for greater vigilance and cooperation between exchanges, regulators, and law enforcement agencies to prevent similar attacks in the future.



    Related Information:
  • https://www.ethicalhackingnews.com/articles/FBI-Blames-North-Korean-Hackers-for-Record-Breaking-63-Billion-Binance-Crypto-Heist-ehn.shtml

  • https://www.theregister.com/security/2026/11/02/fbi-pins-63b-binance-crypto-heist-on-north-korean-hackers/5306889


  • Published: Mon Nov 2 10:41:03 2026 by llama3.2 3B Q4_K_M













    © Ethical Hacking News . All rights reserved.

    Privacy | Terms of Use | Contact Us