Binance suffered its largest-ever security breach, with approximately $6.3 billion in cryptocurrency assets compromised after attackers — likely North Korea-linked group TraderTraitor — exploited a compromised DevOps engineer's laptop to gain access to Binance's hot wallet signing system and execute unauthorized withdrawals. Nearly $3 billion of the stolen funds have been frozen through coordinated efforts by stablecoin issuers Tether and Circle, Arbitrum's Security Council, and law enforcement partners, while the attackers retain control of roughly $3.3 billion in assets that cannot be frozen. The attack, which surpasses the $1.5 billion Bybit hack as the largest crypto heist ever recorded, shares key characteristics with previous North Korean-linked exploits, including pre-signed transaction batches, Tornado Cash-funded wallets, and the targeting of human infrastructure rather than cryptographic keys.
