FBI Links North Korea's Trader Traitor to Record $6.43 Billion Binance Crypto Heist
Summary: The FBI, with the Secret Service and IRS Criminal Investigation, attributed the theft of more than $6 billion in virtual assets from Binance to TraderTraitor, a North Korea-aligned group also tracked as Jade Sleet, Pressure Chollima, PUKCHONG, Slow Pisces, and UNC4899, which is converting the funds primarily into Ethereum. The haul, stolen across 11 blockchains with 82% on Ethereum and Bitcoin, eclipses the $1.46 billion taken from Bybit in February 2025, and $2.85 billion of the $6.43 billion has been frozen on-chain by Tether, Circle, Ripple, Arbitrum, and Optimism.
What's compelling: Elliptic says this single incident almost doubles the total cryptoassets stolen by the North Korean regime, which is believed to have taken over $6.5 billion in recent years - and TraderTraitor is still running recruitment-themed lures through trojanized Terraform providers and front companies aimed at people in cybersecurity, AI, and blockchain.
Read the original at The Hacker News ↗
- Topics
- Threat Actors & Nation-State
- Related
- University of Texas at Arlington warns personal information stolen during cyberattack Cyber Risks · Nov 13, 2026Hackers Exploit PHP2Shell Flaws in Check Point Gateways to Deploy TSGA Backdoor and Wipe ESXi Files Cyber Risks · Nov 13, 2026Hackers compromise 4,800 GitHub accounts to steal cloud credentials Cyber Risks · Nov 12, 2026