Skip to content
Back to the daily read

Daily Read: Tech

Binance Aims to Reclaim $6.3 B Stolen in North Korea‑Linked Hack

Binance announced on Friday it is actively pursuing the recovery of more than $6 billion that was siphoned from its hot wallets in a cyber‑attack attributed to a North Korean hacking unit known as TraderTraitor. The exchange said it is coordinating with law‑enforcement agencies, stable‑coin issuers such as Circle and Tether, and blockchain‑intelligence firms like TRM Labs to trace, freeze and, where possible, seize the stolen assets. Within an hour of the breach, TRM Labs reported that $2.4 billion of the stolen funds had already been frozen by issuers, bringing the total frozen amount to roughly $3 billion. However, the bulk of the loss - about $2.4 billion in Bitcoin and Ether - remains on public blockchains and cannot be halted by issuers. Binance’s plan is to move any recoverable assets into wallets that the hackers cannot access, obtain a U.S. seizure warrant, and then pursue civil forfeiture proceedings to transfer the funds to victims or the government. The company also pledged to cover the full losses from its own reserves. Experts note that the recovery timeline is highly uncertain; a Swiss firm recovered $10.5 million in 14 months, while the Bybit hack in 2025 cost $1.5 billion. The incident underscores how cryptocurrency exchanges can be targeted by state‑backed actors to bypass sanctions and finance illicit activity.

· CBS News

The essential points

  1. 01Binance is working with law enforcement and blockchain firms to trace and recover $6.3 billion stolen by a North Korean hacking unit.
  2. 02Within an hour, stable‑coin issuers froze $2.4 billion of the loot, bringing the total frozen assets to about $3 billion.
  3. 03The remaining $2.4 billion in Bitcoin and Ether cannot be halted by issuers and may only be recovered if converted to fiat.
  4. 04Binance pledged to cover the full loss from its own reserves and is pursuing seizure warrants and civil forfeiture to return assets to victims.
The full brief

Binance announced on Friday it is actively pursuing the recovery of more than $6 billion that was siphoned from its hot wallets in a cyber‑attack attributed to a North Korean hacking unit known as TraderTraitor. The exchange said it is coordinating with law‑enforcement agencies, stable‑coin issuers such as Circle and Tether, and blockchain‑intelligence firms like TRM Labs to trace, freeze and, where possible, seize the stolen assets. Within an hour of the breach, TRM Labs reported that $2. 4 billion of the stolen funds had already been frozen by issuers, bringing the total frozen amount to roughly $3 billion. However, the bulk of the loss - about $2.

4 billion in Bitcoin and Ether - remains on public blockchains and cannot be halted by issuers. Binance’s plan is to move any recoverable assets into wallets that the hackers cannot access, obtain a U. S. seizure warrant, and then pursue civil forfeiture proceedings to transfer the funds to victims or the government. The company also pledged to cover the full losses from its own reserves.

Experts note that the recovery timeline is highly uncertain; a Swiss firm recovered $10. 5 million in 14 months, while the Bybit hack in 2025 cost $1. 5 billion. The incident underscores how cryptocurrency exchanges can be targeted by state‑backed actors to bypass sanctions and finance illicit activity.