Why North Korea's 'Elite' Hackers Are the Prime Suspect in Major Binance Hack
Two major blockchain analytics firms say they have robust intelligence pointing to a North Korean state-backed group as the likely culprits in the $6.3bn (£4.7bn) hack of Binance, the world's largest cryptocurrency exchange.
TL;DR
- TRM Labs and Chainalysis identify North Korea's Lazarus Group as the prime suspect in the $6.3bn Binance hack.
- North Korea is accused of relying on cybercrime to finance itself, despite severe internet restrictions.
- The Lazarus Group, also known as TraderTraitor, has been linked to previous major hacks, including Sony Pictures and the Bybit exchange.
- North Korean cyber operations are believed to be systematically developed by recruiting top students and overseeing them through the nation's intelligence agency.
- The Binance hack involved compromising a hot wallet, possibly through unauthorized access to the signing system.
- Binance initially suspected a compromised laptop but later admitted to wider breaches, securing about 80% of stolen assets.
- The sophistication of this heist, potentially involving AI and novel laundering patterns, highlights the growing capabilities of North Korean hackers.