Authorities identified the cyber activity as “TraderTraitor.” According to the FBI, the U.S. Secret Service, and IRS Criminal Investigation, the hackers converted the stolen assets primarily into Ethereum (ETH). Officials expect the funds to be further laundered through decentralized finance (DeFi) platforms and instant cryptocurrency exchange services. In response, federal officials are urging cryptocurrency exchanges, blockchain analytics firms, and other digital asset service providers to block transactions involving wallet addresses linked to the stolen funds to prevent further laundering.
Binance disclosed the breach on Thursday, stating that hackers had stolen approximately $6.3 billion in digital assets. By Saturday, the exchange reported that it had replenished approximately 90% of the stolen assets, covering roughly $6 billion of the estimated total loss. Binance stated that major cryptocurrencies, including Bitcoin, Ethereum, Tether, and BNB, are fully backed. The exchange continues to purchase less-liquid tokens through market and over-the-counter transactions. “Binance will absorb the financial impact of these stolen funds, not our users,” the company said, while confirming that it is resuming crypto withdrawals in phases.
President Donald Trump addressed the breach on Saturday, stating that his administration is still gathering information regarding the possible involvement of North Korean hackers. “I’m not concerned. We’re learning about it. We don’t know if it’s North Korea, but if it is, we’ll talk to them about it,” Trump told reporters. This statement contrasts with the FBI’s definitive attribution released the same day.
Eric Schiffer, chairman of Patriarch and Reputation Management Consultants, described the incident as “one of the world’s greatest thefts of all time.” He warned that the breach underscores growing cybersecurity challenges facing major financial institutions and could signal the beginning of a broader wave of sophisticated cyberattacks. Schiffer noted that as artificial intelligence becomes more powerful, the threat of “AI hacking” may lead to increased instability in the sector.
The incident highlights the intersection of state-sponsored cybercrime and the global digital asset economy. While Binance has taken steps to restore user confidence by covering the financial loss, the scale of the theft remains a significant challenge for the industry’s security infrastructure. Federal agencies continue to monitor wallet addresses associated with the theft to track and freeze illicit assets.
