The Federal Bureau of Investigation announced Saturday that North Korea was responsible for the theft of roughly $6.3 billion in digital assets from cryptocurrency exchange Binance. The FBI designated this operation as "TraderTraitor," referring to a pattern of malicious cyber activity it has recently observed.
According to the FBI's statement, the stolen assets are being converted primarily into Ether (ETH) and are expected to move through decentralized finance services and instant swap platforms as part of an advanced money laundering operation. The agency called on private sector entities—including THORNode operators, RPC node operators, instant exchanges, DeFi services, and blockchain analytics firms—to block transactions associated with addresses used by the attackers.
The incident reflects a broader pattern of North Korean cyber operations targeting cryptocurrency platforms. Research indicated that North Korea-linked hackers were responsible for approximately 60 percent of cryptocurrency theft losses in 2025, with proceeds directed toward funding the regime's nuclear and ballistic missile programs.
A report by CertiK attributed more than $2 billion of an estimated $3.4 billion in 2025 cryptocurrency security losses to North Korean-linked groups across 79 of 656 documented incidents. Between 2016 and early 2026, North Korean actors stole an estimated $6.75 billion in cryptocurrency across 263 documented incidents, according to CertiK analysis.
Cryptocurrency theft provides off-budget financing for weapons development alongside other revenue sources. North Korea's estimated annual defense spending ranges up to $6 billion according to independent research, while arms transfers to Russia have supplemented domestic weapons programs since 2022.
