Federal investigators have formally attributed a massive cyberattack on cryptocurrency exchange Binance to North Korean threat actors, marking a major development in the largest digital asset theft in history.
In a joint statement released Saturday, the FBI—working in coordination with the U.S. Secret Service and the criminal investigation division of the Internal Revenue Service—announced that North Korean operatives operating under the designation TraderTraitor are responsible for lifting more than $6 billion in digital assets. Investigators reported observing these threat actors actively converting the stolen funds primarily into Ethereum. Federal officials caution that the assets are expected to undergo further laundering stages using decentralized finance protocols and instant swap services.
The unprecedented breach has sent profound shockwaves through the digital asset sector as the industry battles for broader mainstream integration. Cyber security experts classify the incident not only as the largest cryptocurrency heist on record, but also as one of the most significant cyber operations ever recorded globally.
Binance, recognized as the world’s largest cryptocurrency exchange by trading volume, announced it has successfully covered approximately 90% of the $6.3 billion total loss. The platform stated it is on track to resume standard withdrawals, fulfilling an earlier commitment to fully absorb the financial impact so that individual customers do not experience personal losses.
The attribution aligns state-sponsored cyber warfare with a recurring pattern of high-profile digital heists. The FBI has previously tied the elite TraderTraitor unit to other major cryptocurrency assaults, including a $1.5 billion attack on Bybit last year and the 2022 theft of roughly $620 million.
Political leaders have also weighed in on the security crisis. President Donald Trump addressed reporters from the Oval Office on Friday, noting that the administration was actively probing North Korea’s potential involvement. Reflecting on the evolving nature of financial crimes, Trump remarked on the difficulty of recovering untraceable digital assets compared to traditional banking fraud.
The disclosure comes amid shifting diplomatic signals between Washington and Pyongyang. Although Trump has floated the possibility of renewing outreach and holding a meeting with North Korean leader Kim Jong Un within the year, he tempered expectations earlier this month by stating he was uncertain whether any such engagement was actively being sought.
