Analysts Blame North Korea for Binance Crypto Breach
Late on Thursday, hackers began emptying wallets at Binance, the world's largest cryptocurrency exchange, which serves users worldwide. Binance says the breach affected an estimated $6.3 billion in assets, more than the $2.9 billion that TRM Labs, a US blockchain analysis firm, counted for all crypto thefts last year. That could make it the biggest crypto heist on record. TRM Labs and Chainalysis, a second US firm, blame North Korea.
According to TRM, the attackers ordered Binance's own wallets to empty into theirs. This mirrors a 2025 heist at the exchange Bybit that the FBI, the US federal police, attributed to North Korea. Binance said an initial investigation points to a hacked laptop belonging to one of its engineers. Stablecoin issuers, companies whose tokens are pegged to a currency such as the dollar, moved quickly: Tether froze nearly $1.57 billion and Circle more than $800 million. Overall, Binance says about $3 billion has been recovered or frozen.
Binance has not said what happened to the remaining $3.3 billion. Co-CEO Richard Teng promises to cover every loss, yet the exchange's reserve fund for breaches holds only $1 billion in bitcoin; Teng says company funds will cover the rest. Binance has attributed the attack to no one, and North Korea routinely denies running state hacking units.
Binance expects to resume withdrawals within the next 48 hours. Its security team is still tracing the full attack path through the compromised laptop, which the exchange says may have been the entry point. Binance is also working with partners to freeze more of the stolen assets.
The cards of this story
from the video, click to enlarge
Sober, well-sourced report on a huge crypto hack that includes freezes, recovery and open questions, but its focus stays on the crisis rather than on lasting solutions.
The text gives concrete figures, names its sources (TRM Labs, Chainalysis, the FBI) and openly states what is unknown, such as the missing $3.3 billion and Binance's own refusal to name a culprit. It also reports real responses: Tether and Circle froze funds, about $3 billion was recovered or frozen, and Binance promises to cover losses. What is missing is a broader look at how such attacks could be prevented, for example better laptop security or safeguards against wallet takeovers, and independent expert views on whether Binance's reserves can really cover the loss. Such context would raise the score.
AI assessment by fixed criteria. How we score →
