The October 29 attack stands as the largest digital asset heist in history, executed by a cell connected to North Korea's notorious Lazarus Group. Perpetrators breached internal systems using deceptive social engineering schemes, including fake recruitment tests designed to install malware on employee computers. The group previously executed major cyber attacks, including a US$1.5 billion heist targeting cryptocurrency exchange Bybit in February 2025. Stolen assets are routinely filtered through mixers and private exchanges to be transformed into cash for weapons procurement.
Key points
North Korea leverages cyber warfare to bypass strict international sanctions and acquire…: North Korea leverages cyber warfare to bypass strict international sanctions and acquire vital foreign currency.
Laundering networks convert stolen cryptocurrency into cash to illegally procure componen…: Laundering networks convert stolen cryptocurrency into cash to illegally procure components for weapons of mass destruction.
The Binance intrusion follows a pattern of high-profile state thefts, including attacks a…: The Binance intrusion follows a pattern of high-profile state thefts, including attacks against the Ronin network and Bybit.
Sources checked by our analysis pipeline: 1
The Oct 29 attack is believed to be the largest crypto heist in history and is latest in a string of high-profile cyber thefts linked to Pyongyang.
SEOUL: North Korea’s TraderTraitor hacking group has been blamed by US authorities for stealing more than US$6 billion in virtual assets from Binance, in what is believed to be the largest crypto heist in history.
The Oct 29 attack is the latest in a string of high-profile cyber thefts linked to Pyongyang, which has built a formidable hacking operation, generating funds believed to help finance its weapons programme.
Here are five things to know about the group and its place in North Korea’s cyber warfare programme:
WHO ARE THEY?
TraderTraitor is the name given to a North Korean hacking operation linked to the broader Lazarus Group, which gained notoriety in 2014 when it hacked Sony Pictures in retaliation for The Interview, a satirical film that mocked North Korean leader Kim Jong Un.
Pyongyang has invested heavily in developing its cyber capabilities since at least the mid-1990s, building a formidable force that South Korean…
The Ahmedabad-headquartered bio-pharmaceutical manufacturer Concord Biotech has finalized plans to reward existing equity holders through corporate action. Investors must hold the company's stock by Tuesday, November 3, to qualify for the distribution ahead of the midweek eligibility cutoff. This corporate reward comes as the business navigates mixed trading momentum across diverse market timeframes.
Domestic equities are positioned for a potential year-end rebound after enduring persistent foreign institutional selling, weak currency performance, and high crude costs. Long-term trends indicate that late-year calendar tailwinds frequently revive trading momentum across benchmark and sectoral indexes. However, sustaining this performance requires a meaningful recovery in fundamental drivers rather than relying entirely on historical seasonal patterns.
Platform users can once again transfer their assets after the exchange successfully absorbed the financial impact of a massive security breach. The swift resolution aims to stabilize operations and reassure account holders following one of the largest cyberheists on record. Full access to the digital asset has now been re-established for customers worldwide.