Finance1 min read

Why North Korea's 'elite' hackers are the prime suspect in major Binance hack

By · Published by Everything Blog

In short

The attack targeted Binance through multiple compromise points, extending well beyond an initially suspected laptop belonging to an engineer. While company officials have managed to secure 80% of the diverted assets, the remaining 20% is still missing as the perpetrators actively attempt to launder the proceeds. Chainalysis noted that the hackers utilized previously unseen laundering patterns, indicating evolving operational tactics. Experts suspect the state-directed operatives may have even leveraged artificial intelligence to enhance their intrusion capabilities.

Key points

  • North Korea systematically funds its government activities through massive state-sponsore…: North Korea systematically funds its government activities through massive state-sponsored cybercrimes despite official denials from Pyongyang.
  • Binance investigators uncovered multiple operational breach points beyond the single comp…: Binance investigators uncovered multiple operational breach points beyond the single compromised engineer laptop that was originally suspected.
  • Investigators have documented unprecedented laundering patterns as the perpetrators attem…: Investigators have documented unprecedented laundering patterns as the perpetrators attempt to conceal the remaining twenty percent of missing funds.

Sources checked by our analysis pipeline: 1

- Published

Two major blockchain analytics firms say they have robust intelligence pointing to a North Korean state-backed group as the likely culprits in the $6.3bn (£4.7bn) hack of Binance, the world's largest cryptocurrency exchange.

The Lazarus Group, a North Korean hacking unit also known as TraderTraitor, was identified "with high confidence" by TRM Labs, as well as Chainalysis.

This incident is just the latest linked to the country, one of the poorest in the world and where access to the internet is severely restricted.

Experts accuse the government of North Korean leader Kim Jong Un of relying on cybercrime to finance itself, something Pyongyang has long denied.

Though not financial, the nation's most spectacular suspected hack took place in 2014. The target: Sony Pictures, which had made the Hollywood film The Interview. The film involves a plot to assassinate Kim.

The resulting hack exposed thousands of embarrassing emails exchanged among the studio's top executives.

Who could be behind the Binance hack and what we know so far

- Published14 hours ago

Last year, the Federal Bureau of Investigation (FBI)…

Finance