$6.3 Billion Binance Breach Was 'Cyber War,' TRM Labs Says as Tether Freezes $2.67 Billion in Stolen Crypto – BigGo Finance

$6.3 Billion Binance Breach Was ‘Cyber War,’ TRM Labs Says as Tether Freezes $2.67 Billion in Stolen Crypto  BigGo Finance

TRM Labs has attributed the $6.3 billion Binance theft to TraitorTrader, a North Korean state-linked hacking group, after intruders impersonated… Blockchain intelligence firm TRM Labs has attributed the $6.3 billion theft from Binance to a North Korean state-linked hacking group and warned that the campaign amounts to "cyber war," even as stablecoin issuers managed to freeze roughly 40% of the stolen assets within hours. The exchange disclosed in a post-incident report on Nov. 3 that intruders posed as recruiters to plant malware on an engineer's work computer, then leveraged a compromised internal artificial intelligence tool to reach the wallet-signing service that ultimately let them drain funds. TRM Labs identified the perpetrators as TraitorTrader, a collective it says operates on behalf of Pyongyang, citing what it described as "indisputable" evidence gathered both onchain and offchain.

The same group was previously tied to the $1.5 billion Bybit breach in February 2025. "The industry's response to this attack was unprecedented, but we are only going to see much more of this," Ari Redbord, TRM Labs' global head of policy and government affairs, said in remarks to Cointelegraph. He described the coordinated freeze as a first for the sector: "Nothing like that has ever been done before. They were able to claw back 40% right out the gate." Tether blocked 971.1 million USDT tokens