US State Department Links North Korea to $6 Billion Binance Cryptocurrency Heist
The U.S. State Department stated on November 2 that North Korea’s cybercrime operations are an international threat impacting jurisdictions worldwide, pointing to a crypto theft of over $6 billion from the Binance exchange that occurred on October 29, Radio Free Asia reported. A State Department official shared Federal Bureau of Investigation data attributing the Binance hack to North Korea, explaining that Pyongyang has increasingly relied on cyber operations in recent years to fund illicit weapons of mass destruction and ballistic missile programs while evading international sanctions.
Federal Bureau of Investigation Identifies TraderTraitor Group in Binance Hack
The Federal Bureau of Investigation released investigative data on October 31 identifying the Binance asset theft as the work of North Korea’s TraderTraitor malicious cyber activity group. According to the bureau, the hackers have converted the stolen assets primarily into Ethereum. The agency, working alongside the U.S. Secret Service and the Internal Revenue Service Criminal Investigation division, expects the funds to undergo further money laundering steps through decentralized finance services and instant swap services.
Investigators published 300 Ethereum addresses and 19 Bitcoin addresses that either hold or previously held assets from the heist, noting they are directly operated by or closely tied to the TraderTraitor network. U.S. President Donald Trump addressed reporters at his Mar-a-Lago residence in Florida on October 31, stating he did not know whether North Korea was behind the Binance hack, but adding that if it were, he would speak with North Korea about the issue.
TRM Labs and Chainalysis Trace North Korean Money Laundering Tactics
Nick Carlsen, a senior analyst at blockchain intelligence firm TRM Labs, told Radio Free Asia that roughly half of the stolen funds will likely be laundered and converted into Chinese yuan or U.S. dollars. Carlsen noted that about $3 billion was frozen immediately, meaning North Korea did not walk away with the entire sum. Unfrozen funds, however, will face a lengthy laundering process requiring substantial commissions paid to Chinese facilitators.
Carlsen stated that North Korea has stolen at least $12 billion in digital assets to date, with more than $7 billion of that total occurring this year. Blockchain analysis firm Chainalysis reported on October 30 that North Korea is estimated to account for roughly 89 percent of global cryptocurrency hacking losses this year, a dramatic increase from 15 percent in 2021.
U.S. Officials Urge Financial Disruption Against North Korean Banks
State Department officials emphasize that governments and network security teams must collaborate to mitigate North Korean cyber threats. Carlsen argued that international bodies cannot stop North Korea from profiting through cyber heists via defensive measures alone, suggesting that targeting financial vulnerabilities like North Korea’s Foreign Trade Bank and Daesong Bank offers a more effective disruption vector than chasing individual hackers.
Ari Redbord, head of policy at TRM Labs, told Radio Free Asia that consistently indicting and unmasking North Korean hackers imposes reputational damage and creates friction in their money laundering pipelines. Redbord acknowledged public skepticism about hackers re-emerging under new names, but maintained that constant disruption, asset freezing, and mixer service blockades are essential to fracturing North Korea’s illicit financial flows.
Frequently Asked Questions About the Binance Hack and North Korean Cyber Operations
What specific malicious group did the FBI link to the Binance crypto theft?
The Federal Bureau of Investigation identified the TraderTraitor malicious cyber activity network as the perpetrator behind the October 29 Binance asset theft.
How much total cryptocurrency has North Korea stolen according to tracking firms?
TRM Labs senior analyst Nick Carlsen reported that North Korea has stolen at least $12 billion in digital assets historically, with over $7 billion amassed this year alone.
What methods are hackers using to launder the stolen Ethereum and Bitcoin?
Federal investigators report that the stolen funds are being moved through decentralized finance services and instant swap services to convert them into other assets while evading tracking.
Chainalysis data from 2021 previously showed North Korea responsible for just 15 percent of global crypto hacking losses.
Worth a look