Business & Finance · Crypto · 18 outlets (L 3 · C 6 · R 3 · 6 not rated)
FBI blames North Korea for $6.3 billion Binance crypto hack
The FBI said Saturday that North Korea was responsible for the theft of $6.3 billion in cryptocurrencies from Binance, which it described as the biggest crypto hack in history.[8, 11, 17] The bureau said the attack was tied to an entity known as TraderTraitor, the same actors behind a $1.5 billion Bybit hack last year.[4, 8] The FBI said it observed actors connected to the hack converting stolen tokens to Ethereum and preparing further laundering, and urged crypto firms to block wallet addresses tied to the theft.[10, 18]
The FBI said it worked with the U.S. Secret Service and the criminal arm of the Internal Revenue Service on the case.[17] President Trump said of the case, "I'm not concerned. We're learning about it," according to HuffPost.[1]
Binance has resumed withdrawals and says it has replaced roughly 95% of the stolen assets so far.[12, 14, 16] Investors pulled $3.6 billion from the exchange as withdrawals restarted, according to The Guardian and The New York Times.[2, 3]
Why it matters Binance has restarted customer withdrawals and says it will reimburse users whose assets were stolen.[14]
Covered by The New York Times, ABC News, The Wall Street Journal and 15 more
Of the 12 rated outlets that covered it, 3 are left of center, 6 are center and 3 are right of center (1 of them in the Right group). 6 more are not rated.
Left 3 of 42
Center 6 of 33
Right 3 of 38
← LeftCenter outlets covered it most (C 6 · L 3 · R 3)Right →
Where the outlets sit
0Left3Leans left6Center2Leans right1Right
Left: none.
Leans left: HuffPost (−1.06), The New York Times (−0.70), The Guardian (−0.70).
Leans right: The Wall Street Journal (+0.63), New York Post (+0.64).
Right: Fox Business (+1.66).
Not rated Al Jazeera, Financial Times, TechCrunch, The Information, The Verge, Semafor. Not placed: they have no lean score.
Each dot is an outlet that covered it, placed by its audience-lean score (Eady et al. 2025), which measures who shares its links, not how accurate it is. The ticks under the line are all 113 rated outlets Tare reads.
Binance, described as the world’s largest cryptocurrency exchange, reported a security incident in which attackers made unauthorized withdrawals with an estimated impact of about $6.3 billion. The company halted deposits and withdrawals, said user funds would be covered from company and SAFU reserves, and later said it had replenished about 90% of the affected amount, with less-liquid tokens still being bought. It also said partners had frozen roughly $3 billion of assets on-chain.[9]
Binance’s initial investigation pointed to access via a compromised laptop of a DevOps engineer, which it said allowed unauthorized withdrawal transactions; it later said the attack was complex and involved additional breach points. Blockchain-tracing firms including TRM, and later the FBI, linked the theft to North Korean activity identified as TraderTraitor. The FBI said stolen assets were being converted mainly into Ethereum and would likely be further moved through DeFi and swap services. Crypto-tracing firms said the bulk of the siphoning took about 20 minutes, starting around 4 p.m. ET on Thursday.[2, 9]
Background
Outlets described the episode as the largest known crypto theft and among the largest digital-asset thefts on record. North Korean-linked groups have been accused in prior crypto thefts. Binance.US said it was a separate platform and was not affected. President Donald Trump said the U.S. was looking into whether North Korea was responsible and that “we don’t know.”[2, 9]
How the coverage differs
Left-leaning outlets such as NPR stressed the speed of the theft, TRM’s confidence in a North Korea link, Binance’s 2023 anti-money-laundering case, and crypto’s limited regulation. Center outlets such as ABC News focused on Binance’s engineer-laptop account, the FBI TraderTraitor attribution, frozen assets, and the 90% coverage pledge. Right-leaning Fox Business highlighted the FBI confirmation, Trump’s comments, conversion of stolen funds into Ethereum, and an expert warning about future AI-enabled hacking. Wired emphasized the roughly 20-minute timeline and that much of the crypto might not be recovered.[2, 9]
What's still unclear
Full technical details of how access was obtained beyond the laptop and additional breach points have not been published. How much of the remaining 10% and unfrozen funds will be recovered is open. Private firms and the FBI attributed the attack to North Korea’s TraderTraitor group; Trump said the government was still gathering information.[9]
Written by Grok from the full articles, at a reader's request. AI can get details wrong; check the sources.
