Ethical Hacking News
The FBI has blamed North Korea for the theft of over $6 billion in virtual assets from cryptocurrency exchange Binance, attributing the attack to the North Korean elite hacking unit, known as TraderTraitor or APT38. The agency is urging companies to block transactions involving the stolen funds and is committed to protecting the virtual asset community from North Korea's illicit cybercrime activities.
The FBI blames North Korea for the theft of over $6 billion in virtual assets from Binance. The attack was carried out by the North Korean elite hacking unit, known as TraderTraitor or APT38. The attackers used an engineer's laptop to send unauthorized withdrawal requests. The stolen assets include approximately 420,000 ETH and 18,270 BTC, valued at over $2.4 billion. The FBI urges companies to block transactions involving the stolen addresses. The stolen assets are expected to be laundered through DeFi and instant swap services. The FBI is committed to protecting the virtual asset community from North Korean hacking units.
The Federal Bureau of Investigation (FBI) has issued a public alert blaming North Korea for the theft of over $6 billion in virtual assets from cryptocurrency exchange Binance. The agency has identified the North Korean elite hacking unit, known as TraderTraitor or APT38, as the perpetrators behind the cyber attack.
According to the FBI, the attackers used access from an engineer's laptop to reach a service container and send unauthorized withdrawal requests. The attack was carried out on October 29, 2026, and resulted in the largest crypto theft on record, surpassing the $1.5 billion Bybit hack of February 2025.
The FBI has released a list of wallet addresses that are believed to be controlled by North Korean attackers or are closely linked to them. These addresses include approximately 420,000 ETH and 18,270 BTC, which are valued at over $2.4 billion.
The FBI is urging private companies, including crypto service providers, DeFi platforms, blockchain analytics firms, and other companies, to block any transactions involving these addresses. The agency expects the stolen assets to be laundered through DeFi and instant swap services before being further laundered.
TRM, a blockchain analysis firm, was the first to attribute the attack to TraderTraitor, and Chainalysis has also confirmed the findings. The FBI has acknowledged TRM's attribution and is working closely with the firm to track the funds and alert partners through the Beacon Network.
Binance has confirmed a security incident and suspended withdrawals on several networks. However, the freeze was not effective in stopping the attackers, who sold USDT to market makers and borrowed ETH against USDT on Aave, allowing them to retain control of the stolen funds.
The FBI is committed to protecting the virtual asset community by identifying, mitigating, and disrupting North Korea's illicit cybercrime and virtual asset theft activities. The agency is urging anyone with information to provide to contact their local FBI field office or the Internet Crime Complaint Center at ic3.gov.
The attack highlights the growing threat of North Korean hacking units and the need for increased cybersecurity measures to protect virtual assets. The FBI's efforts to track down and disrupt these attacks demonstrate the agency's commitment to safeguarding the financial industry and its users.
Related Information:
https://www.ethicalhackingnews.com/articles/FBI-Cracks-Down-on-North-Korean-Hackers-Behind-6-Billion-Binance-Crypto-Heist-ehn.shtml
https://securityaffairs.com/202221/apt/fbi-blames-north-korea-for-6-billion-binance-crypto-theft.html
Published: Sun Nov 1 15:01:30 2026 by llama3.2 3B Q4_K_M
