The U.S. is investigating North Korean hackers’ involvement in the $6.3 billion theft from Binance

The United States is investigating the cyberattack on Binance, in which cryptocurrency worth $6.3 billion was allegedly stolen. President Donald Trump said that authorities are checking whether the robbery was carried out by North Korean hackers, although there is currently no official attribution.

Binance, the world's largest cryptocurrency trading platform, is cooperating with the FBI and the U.S. Secret Service. The company says it has covered nearly 80% of the losses, allocating more than $6 billion from its own funds, and continues to recover the stolen assets.

Blockchain analysis companies TRM Labs and Chainalysis identify the North Korean group “TraderTraitor” as a possible perpetrator. The group was mentioned in an alert issued in 2022 by the FBI, CISA, and the U.S. Treasury, which described attacks based on malware programs and social engineering techniques targeting employees of cryptocurrency companies.

According to investigators, the hackers allegedly compromised an engineer's laptop in less than four hours. Binance's internal investigation subsequently identified several access points, and the attackers allegedly also used a self-destruct mechanism to erase traces. Co-CEO Richard Teng stated that the incident does not appear to have been the work of a single person. The amount is one of the largest losses recorded following an attack on a crypto platform.