
FBI blames North Korea for $6 billion Binance crypto theft
On October 29 attackers moved about $6.36 billion from Binance wallets; issuers later froze part of the funds.
24 stories, newest first · one card per story

On October 29 attackers moved about $6.36 billion from Binance wallets; issuers later froze part of the funds.

Malicious DebugBear script replaced on Polymarket stole $2.64 million from 726 traders; exchange refunding $3.9 million total.

FBI links the $6.3 billion theft to the TraderTraitor group, with funds moving through DeFi platforms.

TRM Labs says most funds left in about 20 minutes on October 29 across ten chains; Binance says user funds are safe.

Binance says a compromised engineer laptop enabled unauthorized withdrawals and has halted deposits and withdrawals.

TRM and Chainalysis attribute the October 29 theft to North Korea’s TraderTraitor; Binance has not named a culprit.

Binance will cover user losses, and close to $3 billion has already been frozen on-chain.

Circle froze about $800 million and Tether about $1.56 billion; watcher estimates of billions stolen are unconfirmed.

Ledger confirmed spy implants in CryptoBilis-sold Nano X wallets captured seed phrases and drained users' cryptocurrency.

Maryland man Jonathan Spalletta was convicted of stealing $53 million by hacking Uranium Finance in 2021.
Bitget says hackers stole $387.5 million and its CEO links the theft to North Korean groups.

Suspected North Korean hackers stole $351.6 million from Bitget hot and warm wallets.

North Korean WaterPlum actors posed as recruiters to infect 30,000 developers' PCs and steal $10.7M in cryptocurrency via BeaverTail, InvisibleFerret and other malware.

Malone Lam pleaded guilty in D.C. federal court to a racketeering conspiracy that stole and laundered over $245 million in cryptocurrency via social engineering.

Cisco Talos details a crypto-theft ClickFix campaign abusing Google Sheets to swap wallet addresses, with about $10,000 in observed Bitcoin losses.

Cisco Talos tracks a ClickFix crypto-theft campaign using Google Sheets as C2 to swap deposit addresses in Chrome.

Hackers exploited an Elements bug to drain about 4,000 BTC (~$320M) from Liquid Network's federation wallet, then returned 3,400 BTC after Blockstream patched.

Hackers exploited an Elements bug to take ~4,000 BTC from Liquid Network, returned 3,400 BTC (~$265M), and still hold ~598.5 BTC (~$47M).

Malone Lam's plea hearing approaches in the $240 million bitcoin social engineering theft; the case highlights surging crypto fraud and limited enforcement.
AP report on scammers' spending spree after a $240 million bitcoin social engineering theft, as ringleader Malone Lam nears a plea agreement.
Hackers withdrew roughly 4,000 BTC (about $320M) from the Liquid Network federation wallet backing the Blockstream-developed Bitcoin sidechain, claiming benign intent.
Attackers withdrew about 4,000 BTC (~$320M) from Liquid Network's federation wallet via a SideSwap peg-out, claiming whitehat status.
Hackers reportedly withdrew about 4,000 BTC (~$320 million) from the Liquid Federation wallet, according to a widely shared report on X.

Law enforcement, CrowdStrike, and Shadowserver sinkholed the 23-year-old Sality P2P botnet, cutting 15,000+ infected machines from its operator.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views