Techcrunch: North Korean hackers drained that $6.3B from Binance, the largest crypto theft recorded.
Binance traces the entry to a compromised DevOps engineer’s laptop, which reached a service container able to submit unauthorized withdrawals.
It found no sign that wallet private keys leaked, so the attacker apparently abused withdrawal software instead of seizing direct control of the crypto.
Partners have frozen about $3B as the funds crossed blockchains, and Binance has pledged to cover all user losses.
TRM Labs attributes the theft to TraderTraitor, the North Korean cell behind the previous record, the $1.5B Bybit heist in 2025.
Withdrawals stay suspended while Binance rebuilds its withdrawal service, and its claim that user funds are safe awaits an updated proof of reserves.
Investigators have also found additional breach points, so Binance must now explain how 1 engineer’s access reached systems that move billions.
