FBI blames North Korean TraderTraitor group for $6.3B Binance crypto theft
CRITICAL · CRYPTOBinanceredteam/daily · 3 sources
- Severity
- Critical
- Sources
- 3
What happened
Binance attributed the $6.3 billion theft to a compromised DevOps engineer's laptop, which gave attackers access to a withdrawal service container and let them authorise unauthorised withdrawals. The FBI has attributed the attack to North Korea's TraderTraitor group, linked to Lazarus, and has published wallet addresses tied to the theft. Binance says it has replenished about 95 percent of the stolen assets, resumed withdrawals in phases, and recorded about $3.64 billion in net outflows.
For IT people · Written by AI from 3 sources · Wrong?
What to do
- Crypto exchanges and other virtual asset providers should block transactions involving the wallet addresses the FBI has published.
- Security teams should ensure that a compromised employee device cannot alone authorise withdrawals or transfers.
- Organisations should treat privileged developer and administrative identities as high-value targets and monitor them closely.
Written by AI from the sources, checked against them
Full story timeline · 3 updates
Who reported · 3 outlets
ETCISO (The Economic Times)The Register (Security)CSO Online
Who and what is in it
Threat actors