Blockchain intelligence firms, including TRM Labs, have pointed to North Korea as a suspect behind a massive security incident affecting the cryptocurrency exchange Binance. The breach, disclosed on Thursday, impacted approximately $6.3bn (£4.7bn) in assets, making it potentially the largest cryptocurrency heist in history, according to reports.
Binance reported that the attack may have involved an engineer's laptop that had been compromised, which permitted unauthorized withdrawals from the platform. Co-CEO Richard Teng noted that initial investigations point toward a compromised DevOps environment. Following the breach, Binance stated that it has begun recovering funds and that partner platforms have helped freeze about half of the affected assets. The exchange has assured users that it will cover all losses and maintain sufficient financial strength, despite comparisons drawn by industry watchers to previous exchange collapses.
Analysts note that several elements of the Binance breach resemble earlier cyber attacks linked to North Korea, a regime frequently accused of using cryptocurrency theft to generate revenue to help fund its weapons programmes. The scale of the incident potentially eclipses a record-setting $1.5bn hack on the Bybit exchange in 2025, which was also linked to North Korea.
