Binance links $6.3 billion crypto theft to compromised laptop
Original title: Binance links $6.3 billion crypto theft to compromised DevOps laptop
TRM and Chainalysis attribute the October 29 theft to North Korea’s TraderTraitor; Binance has not named a culprit.
Binance said attackers used a DevOps engineer’s compromised laptop to reach a service container and submit unauthorized withdrawals of about $6.3 billion. It says it has not found a leaked wallet private key and has not attributed the attack to any individual. TRM said about $6.36 billion left Binance wallets on ten blockchains on October 29, mostly within about 20 minutes, and attributed it to TraderTraitor. Chainalysis agreed with high confidence. Binance suspended deposits and withdrawals, said user funds are safe, and pledged to cover losses.
Unconfirmed: Binance has not attributed the theft; TRM and Chainalysis blame TraderTraitor, and totals differ slightly by source.
- Issuers and Arbitrum froze roughly $2.7 billion; attackers still hold about $2.4 billion.
- The remaining holdings include more than 420,000 ETH and 18,270 BTC, TRM said.
- Binance said it found more breach points and is still gathering facts.
- TRM called it about four times the February 2025 Bybit theft of $1.5 billion.
Impact: Theft of about $6.3 billion in cryptocurrency
- 1.Binance has suspended deposits and withdrawals while security checks continue.
- Vendors
- Binance
- Threat actors
- TraderTraitorLazarus GroupAPT38
- Victims
- Binance
- Organizations
- TRMChainalysisTetherCircleRipple
- Countries
- North Korea
From the original article
2 min read at bleepingcomputer.com
Binance, the world's largest crypto exchange, has linked the theft of about $6. 3 billion in cryptocurrency to a DevOps engineer's compromised laptop. [...]
By Sergiu Gatlan · bleepingcomputer.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.