Inside TraderTraitor, the North Korean operation behind Binance's $6 billion theft
The FBI attributes the October 29th Binance theft to North Korea's TraderTraitor. The public record names historical defendants, but not the people behind the $6.36 billion signing failure.
By Ryan Merket · Published
Primary source: chatgpt.com
Why it matters
TraderTraitor shows that the decisive control in crypto theft is the authority to make a legitimate system sign, submit or approve a malicious action. Exchanges can hold keys correctly and still lose billions when a developer session, supplier interface or signing service is compromised. The Binance case also separates customer repayment from criminal recovery: an exchange can restore balances while attackers retain native crypto that no issuer can freeze.
The FBI said on October 31st that North Korea was responsible for the theft of more than $6 billion in virtual assets from Binance on or about October 29th, 2026, and that it calls the activity TraderTraitor. The bureau said the actors were converting stolen assets primarily into Ethereum and were expected to move them through DeFi and instant swap services before further laundering.…
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.