North Korea's TraderTraitor Group Behind $6.3B Binance Hack

North Korea's increasing role in cryptocurrency theft has gained attention after a $6.3 billion cyberattack on Binance. Cybersecurity experts have connected this incident to TraderTraitor, a sophisticated North Korean hacking group known for targeting cryptocurrency exchanges and financial institutions.

Investigations by TRM Labs and Chainalysis reveal that North Korea has stolen at least $6.75 billion in cryptocurrency by the end of 2025, which includes a $1.5 billion theft from Bybit in February 2025. The total estimated value of stolen cryptocurrency linked to North Korean hackers has risen to approximately $13.5 billion, according to Michael Barnhart from DTEX.

The TraderTraitor group is recognized as North Korea's most capable hacking unit focused on financial operations, comprising experienced operatives from the country's cyber programs, including former members of APT38. The recent attack on Binance was anticipated following previous incidents, such as the $387 million theft from Bitget in September.