conv.

All stories
SecurityQuiet 10d · day 10

FBI attributes $6.3B Binance hack to North Korea, publishes 628 wallet addresses

Federal agents link the theft to North Korean hackers tracked as TraderTraitor and call on crypto platforms to block the stolen funds.

newest coverage 9d agosummary written 9d ago2 pieces NewswiresMastodon

What to know

  • The FBI has attributed a $6.3 billion theft from Binance to North Korean hackers and released 628 cryptocurrency wallet addresses believed to hold or have held stolen funds.
  • The attack exploited a compromised DevOps engineer's laptop to gain unauthorized access to Binance's systems; the FBI did not explain how the laptop was initially compromised.
  • Federal agencies are urging cryptocurrency exchanges, DeFi platforms, and blockchain analytics firms to block transactions involving the listed addresses to disrupt the attackers' money laundering efforts.
  • Binance confirmed $3 billion in stolen assets have been frozen through cooperation with law enforcement and industry partners, and committed to covering all remaining losses.

“The alert lists 608 Ethereum addresses, 19 Bitcoin addresses and one Solana address. According to the FBI, these addresses hold or previously held assets from the theft and are operated by, or closely connected to, North Korean TraderTraitor hackers.”

FBI, Federal law enforcement · Hackread ↗ · Oct 30

FBI Investigator and attacker attributorNorth Korea (TraderTraitor) AttackerBinance Victim exchangeUS Secret Service and IRS Criminal Investigation Joint investigators

FBI attributes $6.3B Binance hack to North Korea, publishes 628 wallet addresses
byteseu.com

How it unfolded 1 development · click the chart to see its coverage articlesposts

Peak 1 piece in 3h at Oct 31, 10 PM; 2 pieces over 10 days (1 article · 1 post) Oct 31, 10 PM — 1 piece · 1 article — Newswires 1Nov 1, 1 AM — quietNov 1, 3 AM — 1 piece · 1 post — Mastodon 1Nov 1, 6 AM — quietNov 1, 9 AM — quietNov 1, 12 PM — quietNov 1, 3 PM — quietNov 1, 6 PM — quietNov 1, 9 PM — quietNov 2, 12 AM — quietNov 2, 3 AM — quietNov 2, 6 AM — quietNov 2, 9 AM — quietNov 2, 12 PM — quietNov 2, 3 PM — quietNov 2, 6 PM — quietNov 2, 9 PM — quietNov 3, 12 AM — quietNov 3, 3 AM — quietNov 3, 6 AM — quietNov 3, 9 AM — quietNov 3, 12 PM — quietNov 3, 3 PM — quietNov 3, 6 PM — quietNov 3, 9 PM — quietNov 4, 12 AM — quietNov 4, 3 AM — quietNov 4, 6 AM — quietNov 4, 9 AM — quietNov 4, 12 PM — quietNov 4, 3 PM — quietNov 4, 6 PM — quietNov 4, 9 PM — quietNov 5, 12 AM — quietNov 5, 3 AM — quietNov 5, 6 AM — quietNov 5, 9 AM — quietNov 5, 12 PM — quietNov 5, 3 PM — quietNov 5, 6 PM — quietNov 5, 9 PM — quietNov 6, 12 AM — quietNov 6, 3 AM — quietNov 6, 6 AM — quietNov 6, 9 AM — quietNov 6, 12 PM — quietNov 6, 3 PM — quietNov 6, 6 PM — quietNov 6, 9 PM — quietNov 7, 12 AM — quietNov 7, 3 AM — quietNov 7, 6 AM — quietNov 7, 9 AM — quietNov 7, 12 PM — quietNov 7, 3 PM — quietNov 7, 6 PM — quietNov 7, 9 PM — quietNov 8, 12 AM — quietNov 8, 3 AM — quietNov 8, 6 AM — quietNov 8, 9 AM — quietNov 8, 12 PM — quietNov 8, 3 PM — quietNov 8, 6 PM — quietNov 8, 9 PM — quietNov 9, 12 AM — quietNov 9, 3 AM — quietNov 9, 6 AM — quietNov 9, 9 AM — quietNov 9, 12 PM — quietNov 9, 3 PM — quietNov 9, 6 PM — quietNov 9, 9 PM — quietYesterday, 12 AM — quietYesterday, 3 AM — quietYesterday, 6 AM — quietYesterday, 9 AM — quietYesterday, 12 PM — quietYesterday, 3 PM — quietYesterday, 6 PM — quietYesterday, 9 PM — quietToday, 12 AM — quietToday, 3 AM — quiet 1
Nov 1Nov 2Nov 3Nov 4Nov 5Nov 6Nov 7Nov 8Nov 9now · 5:48 AM ET
  1. 1

    Binance confirms $3 billion in stolen assets frozen

    Binance disclosed that approximately $3 billion of the stolen funds had been verified as frozen through cooperation with law enforcement, token issuers, and industry partners. The exchange promised to cover all losses and said it would release a technical report after completing its investigation.

    “The FBI has attributed the theft of more than $6 billion from Binance to North Korea, naming the activity it tracks as TraderTraitor and publishing hundreds of cryptocurrency addresses connected to the stolen funds.”
    — FBI, Federal law enforcement · source
  2. background

    US agencies request crypto platforms block stolen funds — Federal agencies asked cryptocurrency businesses and infrastructure operators—including THORNode operators, RPC node operators, instant exchanges, DeFi services, and blockchain analytics companies—to block transactions involving the listed addresses and funds derived from them.

  3. background

    FBI attributes hack to North Korea, releases 628 wallet addresses — The FBI announced it has attributed the theft to North Korean hackers tracked as TraderTraitor and published 608 Ethereum addresses, 19 Bitcoin addresses, and one Solana address connected to the stolen funds. Investigators from the FBI, US Secret Service, and IRS Criminal Investigation observed the attackers converting stolen assets primarily into Ethereum.

  4. background

    Binance suffers $6.3 billion theft via compromised DevOps engineer laptop — Attackers accessed Binance systems through a compromised DevOps engineer's laptop and submitted unauthorized withdrawal transactions from a service container. Binance later identified additional breach points but did not disclose them publicly.