FBI Links North Korean Hacking Group to $6.43 Billion Binance Heist

The U.S. Federal Bureau of Investigation (FBI) has officially attributed the theft of more than $6.43 billion in virtual assets to TraderTraitor, a hacking group aligned with North Korea.

The attribution was made in a joint announcement alongside the U.S. Secret Service (USSS) and the Internal Revenue Service Criminal Investigation (IRS-CI). The investigation identifies the group—also tracked by threat intelligence researchers as Jade Sleet, Pressure Chollima, PUKCHONG, Slow Pisces, and UNC4899—as the entity responsible for the massive heist targeting the cryptocurrency exchange Binance.

Scale of the Cryptocurrency Theft

The incident represents one of the largest recorded thefts in the history of digital assets. The coordinated effort by federal agencies focused on the movement of the stolen funds and the technical methodologies employed by the state-sponsored actors to compromise the exchange.

The group’s activities reflect a pattern of highly sophisticated, state-aligned cybercrime aimed at generating revenue through large-scale cryptocurrency exfiltration. Law enforcement agencies continue to monitor blockchain activity to track the movement of assets associated with the attack.