US Freezes $2.7 Billion Stolen by North Korean Hackers in Massive $6 Billion Binance Crypto Heist
US freezes $2.7B in crypto stolen by North Korean hackers from Binance.
The US government has frozen over $2.7 billion in cryptocurrency stolen from Binance in a heist attributed to North Korea, which the FBI estimates took more than $6 billion. The Justice Department announced the action, noting that court orders allow for the seizure of over $1.2 billion of the frozen funds. The FBI blames the North Korean group TraderTraitor for the Binance theft, stating that thieves primarily convert stolen funds to Ethereum and use DeFi tools and instant swap services to obscure their trail.
AI summary of the linked source. Not reviewed by an editor. How this works
The lesson from this incident
Full lessonThe North Korean threat group TraderTraitor executed a massive cryptocurrency heist attributed to Binance, stealing over $6 billion and laundering funds through Ethereum conversions, DeFi protocols, and instant swap services to obscure the trail. The sophistication of the laundering technique — layering transactions across decentralized platforms — highlights how inadequate blockchain transaction monitoring and weak anti-money-laundering controls can allow stolen assets to disappear quickly. By the time authorities froze $2.7 billion, a significant portion of the stolen funds had already been successfully laundered. This incident underscores the critical importance of real-time transaction monitoring, anomaly detection, and international cooperation in cryptocurrency platforms to detect and respond to large-scale theft before funds are irreversibly dispersed.
What helps against this
How we list vendors- Identity threat detection and response (ITDR)
Attackers who log in with real, stolen credentials get noticed.
- Device management (MDM and UEM)
Every company laptop and phone is known, encrypted, locked down and up to date.
- Endpoint detection and response (EDR and XDR)
Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- malware — FaceStealer
- malware — Sapphire Sleet
- malware — UNC1069
- malware — BlueNoroff
- malware — APT38
- malware — Stardust Chollima