(LEAD) N. Korean hackers blamed for record US$6.36 bln Binance cryptocurrency theft: U.S. firm

This will let Google show Yonhap news articles that match or are related to your search

(ATTN: UPDATES with details in paras 9-12; ADDS photo) By Chang Dong-woo

WASHINGTON, Oct. 30 (Yonhap) -- North Korean hackers purportedly stole an estimated US$6.36 billion in cryptocurrency from Binance, the world's largest cryptocurrency exchange, in what would be the biggest cryptocurrency theft on record, according to a U.S. blockchain intelligence firm.

TRM Labs said Thursday's attack against Binance was most likely carried out by TraderTraitor, a North Korean hacking group, which stole digital assets from Binance across 10 blockchain networks. Most of the funds were taken in about 20 minutes, it said.

The firm said it had "high confidence" that the group was behind the attack, citing its analysis of cryptocurrency transactions and similarities with previous North Korean hacking operations.

According to TRM Labs, the hackers began preparing for the attack at least 36 hours in advance. The firm believes they gained access to systems used to authorize cryptocurrency transfers, allowing them to move funds without permission.

This file photo from the Associated Press shows the corporate logo of Binance. (PHOTO NOT FOR SALE) (Yonhap)

TRM Labs said about $2.7 billion in stolen assets had been frozen through cooperation among cryptocurrency companies and blockchain operators. However, the hackers still controlled roughly $2.4 billion worth of Bitcoin and Ethereum, two major cryptocurrencies.

The firm warned that the hackers could try to hide the origins of the stolen funds by moving them between different blockchain networks and cryptocurrency trading platforms.

The attack would far exceed the $1.5 billion stolen from cryptocurrency exchange Bybit in February 2025, which the U.S. Federal Bureau of Investigation attributed to TraderTraitor.

U.S. officials have pointed out in the past that North Korea relies on networks of its nationals abroad and foreign-based facilitators, including in China, Russia, Cambodia and Vietnam, to launder stolen digital assets into fiat currency for procurement activities and for funding its weapons of mass destruction programs.

Richard Teng, co-CEO of Binance, wrote on X that the company was "working non-stop" to resolve the issue.

"We are committed to covering all hacked losses through our company funds. Your assets are safe," he wrote.

Teng added that Binance has reserved over $6.34 billion of company funds to cover the stolen assets. Of those funds, $5 billion was already held in the exact token assets that were impacted, he said.

According to Bloomberg News, the U.S. Federal Bureau of Investigation said it is aware of the incident and is coordinating with its partners "to understand the scope of the activity, evaluate potential impacts and coordinate appropriate investigative steps."

This graphic image illustrates a North Korea-backed cyberattack threat. (Yonhap)

odissy@yna.co.kr (END)

U.S. sanctions 10 individuals, entity over N. Korean IT worker fraud schemes

S. Korean man sentenced to 5 yrs in prison for spying for North Korea

S. Korea, U.S., 9 other countries issue joint alert on N. Korean IT workers

(LEAD) N. Korean hackers blamed for record US$6.36 bln Binance cryptocurrency theft: U.S. firm

这将使谷歌能够向您展示与您的搜索匹配或相关的韩联社新闻文章。

（注意：第9-12段更新细节；新增照片）作者：张东宇

华盛顿，10 月 30 日（韩联社）——据一家美国区块链情报公司称，朝鲜黑客据称从全球最大的加密货币交易所币安窃取了价值约 63.6 亿美元的加密货币，这将是史上最大的加密货币盗窃案。

TRM Labs周四表示，币安遭受的攻击极有可能是由朝鲜黑客组织TraderTraitor所为，该组织从币安在10个区块链网络上窃取了数字资产。TRM Labs称，大部分资金在约20分钟内被盗。

该公司表示，他们“高度确信”该组织是此次攻击的幕后黑手，并援引了对加密货币交易的分析以及与之前朝鲜黑客行动的相似之处。

据TRM Labs称，黑客至少提前36小时就开始准备此次攻击。该公司认为，他们入侵了用于授权加密货币转账的系统，从而得以在未经授权的情况下转移资金。

这张来自美联社的资料照片显示了币安公司的标志。（照片不得出售）（韩联社）

TRM Labs表示，通过加密货币公司和区块链运营商的合作，约27亿美元的被盗资产已被冻结。然而，黑客仍然控制着价值约24亿美元的比特币和以太坊，这两种主流加密货币仍然占据主导地位。

该公司警告称，黑客可能会通过在不同的区块链网络和加密货币交易平台之间转移资金来掩盖被盗资金的来源。

这次攻击造成的损失将远远超过 2025 年 2 月从加密货币交易所 Bybit 被盗的 15 亿美元，美国联邦调查局将那次攻击归咎于 TraderTraitor。

美国官员过去曾指出，朝鲜依靠其海外国民网络和驻外协助者（包括在中国、俄罗斯、柬埔寨和越南的协助者）将窃取的数字资产洗白成法定货币，用于采购活动和资助其大规模杀伤性武器计划。

币安联席首席执行官 Richard Teng 在 X 上发文称，公司正在“不间断地”努力解决这个问题。

“我们承诺将用公司资金弥补所有因黑客攻击造成的损失。您的资产是安全的。”他写道。

滕先生补充说，币安已预留超过63.4亿美元的公司资金用于弥补被盗资产。他表示，其中50亿美元原本就以受影响的代币资产形式持有。

据彭博新闻社报道，美国联邦调查局表示，他们已经知晓此事，并正在与合作伙伴协调，“以了解事件的范围，评估潜在的影响，并协调适当的调查步骤”。

这张图示展现了朝鲜支持的网络攻击威胁。（韩联社）

odissy@yna.co.kr (完)

美国制裁10名个人和一家实体，指控其参与朝鲜IT从业人员欺诈计划

韩国男子因替朝鲜从事间谍活动被判处5年监禁

韩国、美国及其他9个国家就朝鲜IT工作者发出联合警报

（导语）美国公司称，朝鲜黑客被指控窃取了创纪录的63.6亿美元币安加密货币。