Top things to know
- Binance suffered a historic cryptocurrency cyberattack resulting in the theft of an estimated $6.3 billion to $9 billion within a 20-minute window.
- U.S. blockchain analysis firms TRM Labs and Chainalysis attributed the breach with high confidence to North Korea's TraderTraitor hacking unit.
- Binance co-CEO Richard Teng confirmed that customer funds remained safe and announced that the company has reserved over $6.34 billion to cover all losses.
- Law enforcement agencies, token issuers, and blockchain firms coordinated to freeze billions of dollars in stolen assets while investigations into additional breach points continue.
Cryptocurrency exchange Binance has experienced what is recorded as the largest digital asset theft in history, with hackers making off with an estimated $6.3 billion to $9 billion across multiple blockchain networks in approximately 20 minutes. U.S. blockchain intelligence firms TRM Labs and Chainalysis attributed the massive cyberattack with high confidence to TraderTraitor, an elite North Korean state-sponsored hacking unit also known as the Lazarus Group.Preliminary findings from Binance indicated that the breach may have originated from a compromised laptop belonging to a DevOps engineer. This unauthorized access reportedly allowed the attacker to infiltrate a service container, subvert transaction-signing systems, and submit illicit withdrawal requests that bypassed normal verification controls. Co-CEO Richard Teng assured customers that user funds held in cold storage were unaffected and emphasized that the company has reserved more than $6.34 billion to fully cover all hacked losses.In the wake of the incident, token issuers, industry partners, and law enforcement agencies launched a coordinated global effort to freeze a significant portion of the stolen funds before they could be fully laundered. While several billion dollars in digital assets have been successfully frozen on-chain, blockchain investigators noted that a substantial amount remains unrecovered as perpetrators continue shifting funds across platforms to obscure their trail.