Skip to content
NewA calmer, faster ZeroHour
StoryData breachhighExploited in the wild

North Korean hackers stole $6.34 billion from Binance

1 source · 2 articlesFirst reported Updated ()
What's new

First merged summary.

Merged summary · x-ai/grok-4.7 · rewritten as coverage arrivesSummaries by Vani AI

Binance says North Korean hackers stole $6.34 billion after months of planning; about $2.8 billion was frozen.

Binance confirmed a campaign underway no later than June 2026 stole $6.34 billion from hot wallets. Ars Technica reports North Korean actors used fake job interviews, tampered software, and an internal AI tool. CSO Online says two engineers installed tampered Homebrew packages, enabling lateral movement and rogue withdrawals. Risky Business News says the FBI attributes the hack to TraderTraitor and that three engineers were compromised, including via malvertising and a malicious coding test. Ars reports $2.85 billion frozen or intercepted; Risky Business says $2.8 billion in stablecoins was recovered and $3.25 billion remains unrecoverable. Binance set aside funds and published a Proof of Reserves page.

Key facts
  • Attackers received 970,500 SOL, 44.2 million OP, and 18,270 BTC.
  • Ethereum EIP-7702 was used; MPC wallets needed a special revocation.
  • Stolen tokens spanned 11 cryptocurrencies, including Solana and Optimism.
  • Binance says it blocked 57 suspected North Korea-linked cases in 2026.
  • CSO says FBI attributes the breach to Lazarus/TraderTraitor.
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

What each outlet adds

beyond the shared facts
  • Ars TechnicaSpecific SOL, OP, and BTC amounts, EIP-7702, and MPC revocation.
  • Risky Business NewsThree engineers, malvertising, 11 tokens, and $3.25 billion unrecoverable.
  • CSO OnlineTwo engineers, tampered Homebrew, and policy and access-control failures.
Vendors
Binance
Products
cryptocurrencieshot walletsSolanaOptimismEthereum
Threat actors
TraderTraitorLazarus GroupNorth Korean actors
Victims
Binance
Organizations
FBICoinDeskTRM Security
Countries
North Korea

Coverage

oldest first · one row per article · UTC
  1. · 7d ago Ars Technica · SecurityFirst report

    Binance hackers stole $6.34 billion in crypto after months of planning

    Hackers used fake job interviews, tampered software, and compromised AI tools to breach Binance and exfiltrate assets.

  2. · 7d ago Ars Technica · Security

    Binance loses billions to North Korean hackers

    Hackers stole $6.34 billion in cryptocurrency from Binance after months of planning using social engineering and malware.