World’s Largest Crypto Exchange Binance Hit by $6 Billion North Korean Hack

Binance, the world’s largest cryptocurrency exchange, has temporarily suspended withdrawals following a massive hack that resulted in the theft of $6 billion, marking the largest crypto heist ever recorded. The breach, believed to have originated from North Korea, was uncovered late Thursday, prompting Binance to act swiftly to secure user assets and cooperate with law enforcement agencies.

Details of the Heist and Initial Investigation

An initial investigation revealed that the hackers exploited an engineer’s laptop to gain access to a service container, enabling unauthorized withdrawal transactions. Binance reported the incident on Friday and confirmed that they had started recovering assets affected by the breach. The exchange also noted that no evidence of any wallet private key leak has been found, and the attack was a complex, multi-step operation rather than a simple “one-click” hack.

Binance co-CEO Richard Tend emphasized the intricacy of the breach on X, highlighting the ongoing efforts to trace and reclaim stolen funds. The company assured users that all losses would be covered by Binance’s own funds and an emergency assets fund, reaffirming that “user funds are safe.” Withdrawals and deposits were temporarily suspended to facilitate security checks and recovery efforts, with services expected to resume by Sunday morning.

North Korean Involvement and Crypto-Tracing Efforts

Multiple blockchain intelligence firms have attributed the heist to a North Korean hacking unit. TRM Labs cited “robust on and off-chain intelligence” linking the attack to North Korea, noting similarities with previous North Korea-linked crypto thefts. Pangolin Intelligence, based in Singapore, also confirmed a North Korean connection after analyzing on-chain activity and prior incidents.

An unnamed analyst from Pangolin Intelligence described the situation as a “cat and mouse game” just beginning, with North Korea likely to use money laundering networks to cash out the stolen funds. Chainalysis, another major crypto-tracking company, reported monitoring the stolen assets moving across blockchains such as bitcoin and ethereum and expressed “high confidence” in North Korea’s involvement.

Law Enforcement Response and Recovery Efforts

In response to the breach, a coordinated effort between private firms and law enforcement agencies has been underway to freeze and recover the stolen funds. Approximately $3 billion of the loot has already been frozen in a rapid counter-operation.

The FBI confirmed it is “aware of the incident” and working with public and private partners to assess the breach’s scope and coordinate investigative steps. The US Secret Service is actively collaborating with Circle, the company behind USDC stablecoin, as well as the United States Attorney’s Office for the District of Columbia, to identify and bring the perpetrators to justice.

Background on Binance and Past North Korean Hacks

Founded in 2017 by Canadian Changpeng Zhao, Binance quickly became the world’s largest crypto exchange. Zhao stepped down in 2023 after pleading guilty to violating US anti-money laundering laws and served four months in federal prison before receiving a presidential pardon from President Donald Trump in October last year. Zhao remains Binance’s largest shareholder but no longer manages the platform.

North Korean hackers have a history of targeting cryptocurrency firms, including a previous record hack of $1.5 billion from Bybit, another major exchange. These cybercriminal activities serve as crucial revenue streams for North Korea’s regime, which has stolen billions from banks and crypto firms worldwide over recent years.

Market Impact and Future Outlook

The news of the Binance hack caused a sharp drop in bitcoin and ether prices, although both cryptocurrencies partially recovered to trade about 2-3% lower by midday Friday. Industry experts anticipate ongoing efforts to track, freeze, and recover the stolen funds will continue as law enforcement and private partners intensify their response.

Binance’s swift suspension of withdrawals and public assurances aim to restore user confidence while the investigation unfolds, but the incident underscores the vulnerabilities in cryptocurrency platforms amid limited regulatory oversight.

The world will be watching closely as Binance and authorities work to reclaim billions lost in this unprecedented digital theft, with significant implications for the future of crypto security and international cybercrime enforcement.