In a 20‑minute breach, attackers siphoned $6.36 billion from Binance wallets across 10 blockchains, according to the exchange.
TRM Labs, a U.S.‑based blockchain investigation firm, flagged the attack as a 'high‑confidence' operation by TraderTraitor, a North Korean hacking unit, citing on‑ and off‑chain indicators that mirror the February 2025 Bybit heist.
Chainalysis co‑founder Jonathan Levin also pointed to the same group, noting that the pattern matches DPRK‑linked heists such as the 2014 Sony Pictures breach.
The hack rattled markets, sending Bitcoin down 4% to $77,465 and Ethereum plummeting 5‑6%, while Binance’s native token BNB fell 1%.
Binance has earmarked $6.34 billion of company funds to cover the loss, with $5 billion in the affected tokens, and is working with blockchain partners to freeze about $3 billion of the stolen assets while cooperating with law‑enforcement to trace and recover the remaining funds.