هک بایننس: اف‌بی‌آی کره شمالی را نام می‌برد و بیش از 600 آدرس را فهرست می‌کند

The FBI has officially attributed the theft of more than six billion dollars at Binance to North Korea and published a list of addresses that held parts of the proceeds. For holders in Germany this is above all a story about money laundering, and about what happens when flagged coins eventually arrive at a regulated exchange. Your own balances at Binance are not affected by the list: the exchange says it has replaced 90 percent of the missing holdings out of corporate funds and reopened withdrawals. What the FBI notice of October 31 says The US federal police issued its notice on Saturday, October 31, 2026, together with the Secret Service and the tax investigators of IRS Criminal Investigation. According to several news agencies it states that North Korea is responsible for the theft of more than six billion dollars in virtual assets at the crypto exchange Binance, committed on or around October 29, 2026. The agency names the group responsible as TraderTraitor. Two things in the notice go beyond the attribution itself. First, a list of addresses on three blockchains through which stolen funds have moved. Second, a request to a whole range of companies to block transactions with these addresses. The FBI expects the attackers to keep moving the proceeds through decentralised finance services and instant swap services. Until that Saturday the attribution was an assessment by private analytics firms. TRM Labs and Chainalysis had traced the trail to North Korea early on, and we summarised the state of that suspicion on October 30. Since October 31 an agency that is investigating the case stands behind it. TraderTraitor: how the FBI links the group to North Korea TraderTraitor is the name US authorities have used since 2022 for a state-backed North Korean attack campaign against crypto companies. What characterises it is not the technical break-in but the route there: fake job offers, doctored application documents and trading software, and contacts with employees built up over months. According to the authorities, the same group is also held responsible for the Bybit theft of around 1.46 billion dollars in 2025. The analytics firm Elliptic, which has been following the case on the blockchain since the evening of October 29, had reached the same conclusion before the FBI. The firm's reasoning rests on three observations. The stolen funds are being laundered together with the proceeds of the Bitget attack, which Elliptic also attributes to North Korea. The attackers are using the same services as in earlier TraderTraitor thefts at BigONE, WOO X and AFX. And they worked eleven blockchains in parallel in about three hours, something that in Elliptic's account only a few actors can coordinate.