Analytics Firms Link Reported $6.3bn Binance Theft to North Korean Hackers

Two blockchain analytics companies, TRM Labs and Chainalysis, have identified North Korea’s Lazarus Group as the likely perpetrator of a reported $6.3bn theft from Binance, according to the BBC article. Both firms expressed high confidence in their attribution. North Korea has long denied accusations that it uses cybercrime to fund the state.

TRM said attackers likely accessed the exchange’s hot-wallet signing system. Binance initially suspected a compromised engineer’s laptop, but subsequently reported additional breaches. A company spokesperson said about 80% of the stolen assets had been secured, with the remainder unaccounted for. Binance did not directly answer the BBC’s questions about possible North Korean involvement.

The report places the Binance allegations alongside earlier cryptocurrency thefts attributed to North Korea, including a $1.5bn Bybit breach that the FBI blamed on the country. That history provides context for the analysts’ assessment, but does not independently establish responsibility for this incident or substantiate the article’s suggestion of AI involvement.