The Canada Brief

Tech · 5 d ago

Bitcoin coin on a dark background

Binance hack: experts point to North Korea's TraderTraitor unit

Time to move most of the funds

20 minutes

Blockchain firm TRM says an attacker moved about US$6.36 billion out of Binance wallets on ten blockchains, most of it in about 20 minutes.

TRM, which says it is highly confident, and Chainalysis both attribute the attack to TraderTraitor, described as North Korea's elite hacking unit. TRM says it matches earlier North Korea-linked heists, including the Bybit hack in February 2025.

What we know

  • First probe pointed to a compromised laptop
  • No evidence of a private key leak, Binance says

Not yet

  • Technical details of the breach
  • Identity of the criminals

Binance first pointed to a compromised laptop, then found more points of breach, but says it has found no evidence that a wallet private key leaked.