The Federal Bureau of Investigation has linked a major cryptocurrency theft involving Binance to North Korean hackers. The attack took place this week and involved billions of dollars in digital assets stolen within minutes, making it one of the largest crypto thefts ever reported.
In a statement released on Saturday, the FBI said the attack was linked to a hacking group known as TraderTraitor. The bureau said the group was responsible for the theft and had also been linked to a $1.5 billion attack on the Bybit cryptocurrency exchange last year.
The latest case has raised fresh concerns about the security of digital assets and the growing threat of cybercrime. It also highlights the challenges investigators face when criminals use cryptocurrency networks to move stolen funds across borders.
The FBI has asked cryptocurrency exchanges, blockchain analysis firms and other industry groups to help block transactions connected to several digital wallet addresses. The aim is to prevent the stolen funds from being moved through the financial system to hide their source.
Investigators said their review found that TraderTraitor was converting much of the stolen cryptocurrency into ethereum. The group may now try to move the assets through decentralized finance platforms, often called DeFi, and services that allow users to swap one cryptocurrency for another almost instantly.
These services can make it harder to follow the movement of stolen funds. Criminals may use several wallets and platforms to break up large transfers and make the money more difficult to trace.
The FBI warned that the suspected hackers could continue moving the assets as investigators work to identify the people and services involved. The bureau’s request for help from the crypto industry is part of an effort to disrupt those transfers before the funds can be fully laundered.
President Donald Trump addressed the case briefly on Saturday night while attending a Halloween party at his Mar-a-Lago estate in Florida. He said investigators were still learning about the attack and had not confirmed North Korea’s role.
“I’m not concerned. We’re learning about it,” Trump said when asked about the theft. He added that investigators did not yet know whether North Korea was responsible, although he left open the possibility that the country could be linked to the attack.
The FBI’s statement, however, directly connected the incident to TraderTraitor, a group associated with North Korean cyber activity. The investigation remains important because identifying the attackers may help officials trace the stolen funds and prevent further transfers.
Crypto experts say the hackers are likely to use several methods to hide the money. Ari Redbord, chief policy officer at blockchain intelligence firm TRM Labs, expects the stolen assets to be divided into smaller amounts and moved through smaller exchanges.
Breaking large sums into smaller transfers can help criminals avoid attention from financial monitoring systems. They may also move funds between different digital assets and services, making the trail more complex.
Redbord said the process could continue for months as the hackers attempt to avoid detection. He compared the theft to a bank robbery carried out at the speed of the internet.
However, he also noted that blockchain records can help investigators follow the money. Cryptocurrency transactions are often recorded on public ledgers, allowing specialists to track transfers between wallet addresses and identify patterns that may support an investigation.
This does not mean every stolen asset can be recovered. Criminals may use services that make tracing more difficult, and investigators may need cooperation from exchanges and other companies to identify users or stop transactions.
The latest incident follows a series of major cryptocurrency thefts linked by investigators to North Korean hacking groups. The Bybit attack, which involved about $1.5 billion, showed the scale of losses that cybercriminals can cause when they gain access to digital asset systems.
Such attacks have increased pressure on cryptocurrency firms to improve security and monitor suspicious activity. Exchanges and blockchain analysis companies also face demands to respond quickly when investigators identify wallets linked to a major theft.
The FBI’s appeal to the industry reflects the importance of rapid cooperation. If exchanges identify and block transfers connected to the stolen funds, they may help prevent some of the assets from being moved beyond reach.
For now, investigators are working to trace the stolen cryptocurrency and determine the full scope of the attack. The FBI’s warning suggests that the suspected hackers may continue moving the funds through different services in an effort to conceal their origin.
The case remains a major test for cryptocurrency security and international efforts to fight cybercrime. Its outcome may depend on how quickly investigators and private companies can track the money and identify opportunities to stop or recover the stolen assets.
