A North Korean hacking unit is widely believed to be behind the $6.3 billion cyber-theft from crypto exchange Binance.
Justin Sullivan/Getty Images North America
hide caption
Justin Sullivan/Getty Images North America
This is the biggest cyber-heist in history.
Binance, the world’s largest cryptocurrency exchange, was hacked this week, with cybercriminals looting more than $6 billion. Experts widely believe the hackers were a sophisticated unit within the North Korean military that has a history of cyber heists.
The theft stunned the crypto industry and sparked new fears about a sector that many critics deride as the “Wild West” of finance.
Here are 5 things to know about this spectacular heist.
So first, what are crypto exchanges?
They are akin to the New York Stock Exchange (NYSE) or Nasdaq, but instead of trading stocks, investors turn to Binance and other crypto exchanges to trade digital assets such as Bitcoin.
A wide range of investors trade cryptocurrencies on these exchanges, from financial institutions and sophisticated traders to regular investors looking to make money.
OK, so what happened this week?
At 4:05 p.m. ET on Thursday, hackers were able to access the accounts of investors who trade cryptocurrencies at Binance. It only took these hackers about 20 minutes to make off with just over $6.3 billion in cryptocurrencies.
Ari Redbord, global head of policy at TRM Labs, a crypto research firm that helped Binance track down and recover some of the stolen funds, calls it “the largest bank heist in human history.”
“Imagine a world in which someone could walk into a bank and walk out with $6.36 billion in stolen funds, then transfer those funds at the speed of the Internet,” he says. “It’s bank robbery in the age of technology.”
But many details about the heist remain unclear, including how exactly the hackers were able to hack into investors’ trading accounts at Binance.
Binance, together with other exchanges and partners, managed to freeze around $3 billion in stolen cryptocurrencies, preventing hackers from taking full possession of its digital assets.
The exchange also said it would reimburse all customers who were victims of the cyber heist – although it was unclear how it would do so.
Why do experts think it’s North Korea?
The level of sophistication and speed of the hack all point to a North Korean military hacking unit widely known as TraderTraitor. The unit was also responsible for what was the largest cyber heist on record, the theft of $1.5 billion from crypto exchange Bybit last year.
“North Korea has built the most sophisticated cyber capabilities in the world. It has a cadre of professional hacker teams that are part of its military,” says TRM’s Redbord.
“This is not just a commercial hacker looking to make money,” he adds. “This is going to be used for weapons proliferation and other destabilizing activities.”
Experts say North Korean hackers are highly sophisticated and motivated. Pictured are Korean People’s Army soldiers bowing to statues of late North Korean leaders Kim Il Sung and Kim Jong Il on the 32nd death anniversary of Kim Il Sung, on Mansu Hill in Pyongyang, July 8, 2026.
Kim Won Jin/AFP via Getty Images
hide caption
Kim Won Jin/AFP via Getty Images
What does this heist tell us about the security of cryptographic exchanges?
Researchers say it is too early to determine whether there are major flaws in Binance’s security systems. But they say the heist is a clear sign of the sophistication of North Korean hackers.
Meanwhile, crypto critics say the way Binance and other crypto exchanges are set up deserves scrutiny.
A unique feature of crypto exchanges is that people can buy and sell digital currencies such as bitcoin – and leave them secure on the exchanges.
This dual trust in the exchange makes them very tempting targets for hackers. And what is more concerning to critics is that crypto exchanges are also not required to follow the same strict regulations that govern established Wall Street companies.
“You can trade on the New York Stock Exchange, but you don’t keep your funds on the New York Stock Exchange. You keep them with your broker – and your broker is audited and regulated by the SEC (Securities and Exchange Commission),” says Amanda Fischer, policy director and chief operating officer of the financial consumer advocacy group Better Markets. “And your broker must pay for insurance that will protect clients in the event of a cyberattack.”
“The regulatory framework for crypto is therefore much weaker than that enjoyed by US investors in other markets,” says Fischer.
Although Binance has promised to reimburse customers who lost funds, it is not necessarily required to do so under current regulations. And many critics worry that smaller exchanges will struggle to repay their investors in the event of a hack, leaving those traders to suffer the consequences.
Doesn’t this reinforce the reputation of the Wild West of the crypto industry?
For many crypto critics, this is the case. They warn that the lack of clear regulation for crypto executives could lead to perverse incentives on these exchanges.
In 2022, FTX – then the largest crypto exchange – experienced financial difficulties after a period of intense volatility in the crypto markets, and the exchange dipped into its own customer funds as it desperately tried to save itself. The company collapsed and its CEO and founder, Sam Bankman-Fried, was sentenced to 25 years in prison for fraud, among other charges.
“If a trade goes bad, it can become almost irresistible to dip into these clients’ funds. That’s what they say, to cover their losses,” says Fischer of Better Markets. “But we know this can turn into a disaster for investors.”
This is another reason why the massive Binance cyber-heist is causing so much alarm.
Gn headline
