Follow us on Google News
The US Federal Bureau of Investigation (FBI) has announced a major recovery effort following a $6.3 billion cryptocurrency theft involving Binance, the world’s largest cryptocurrency exchange. American authorities have obtained court authorisation to seize or restrict more than $1.2 billion in stolen digital assets, while investigators and private companies have already frozen over $2.7 billion.
The October 29 cyberattack, attributed by the FBI to a North Korean state-backed hacking group, is being investigated as one of the largest cryptocurrency thefts on record.
How Did Hackers Steal $6.3 Billion From Binance?
The attack reportedly unfolded on October 29, when cybercriminals drained approximately $6.3 billion in cryptocurrency from Binance wallets used to process transactions. Blockchain records examined by cybersecurity investigators suggest that most of the stolen assets were transferred within just 20 minutes.
The precise method used to compromise the exchange remains under investigation. Binance initially suspected that an employee’s laptop had been breached, but subsequent findings suggested that attackers may have exploited additional weaknesses.
Blockchain investigators believe the criminals compromised infrastructure responsible for digitally signing and authorising cryptocurrency transactions. This potentially allowed them to approve unauthorised transfers without directly stealing the private keys controlling the wallets.
The findings suggest that the attackers may have gained control of the transaction approval process itself, enabling substantial amounts of cryptocurrency to be moved before the breach was contained.
https://the420.in/fcrf-certified-chief-ai-officer-second-cohort-november-2026/
Binance has said its investigation remains ongoing. Co-CEO Richard Teng assured customers that losses would be covered through the company’s Secure Asset Fund for Users and its own financial resources.
How Did Authorities Recover Billions in Stolen Cryptocurrency?
Following the theft, the attackers reportedly attempted to distribute the stolen assets across multiple cryptocurrency wallets and blockchain networks to complicate tracking and prevent recovery.
A significant portion of the funds was held in stablecoins, including Tether’s USDT and Circle’s USDC. Unlike decentralised cryptocurrencies such as Bitcoin and Ethereum, certain stablecoins can be frozen by their issuers when suspicious transactions are identified.
Investigators found that the attackers attempted to convert approximately $325 million in stablecoins into Ethereum. Blockchain analysis traced these transactions to around $285 million worth of Ethereum acquired over approximately 20 minutes.
The conversions were apparently intended to move stolen funds into assets that could not be directly frozen by stablecoin issuers. However, cryptocurrency companies and investigators began blocking suspicious transactions within hours. The first reported freezes occurred at approximately 5:14 pm Eastern Time on October 29.
Authorities and private-sector partners have since frozen more than $2.7 billion in stolen cryptocurrency.
The latest legal action involves court authorisation covering more than $1.2 billion in digital assets. Such proceedings allow the government to seek legal control over property believed to be connected to criminal activity.
Why Has the FBI Linked the Attack to North Korea?
The FBI has attributed the cryptocurrency theft to TraderTraitor, a hacking group associated with North Korea and previously accused of targeting digital asset companies.
Investigators strengthened this assessment after identifying connections between funds stolen from Binance and cryptocurrency taken during a separate attack on the Bitget exchange, which had also been attributed to North Korean hackers.
American authorities have repeatedly accused North Korea of using cryptocurrency thefts to generate revenue while circumventing international sanctions. The funds are alleged to support government activities, including prohibited nuclear and ballistic missile programmes.
The latest investigation highlights the continuing challenge of protecting cryptocurrency exchanges from sophisticated attacks targeting transaction infrastructure.
Although billions of dollars have been frozen and substantial assets are now subject to seizure proceedings, investigations into the intrusion and the movement of stolen cryptocurrency remain ongoing.
