FBI Ties $6.3 Billion Binance Hack to North Korea; Pyongyang Fires Missiles

A cryptocurrency theft exceeding $6 billion has escalated tensions between the United States and North Korea. The FBI attributed the October 29 breach at Binance to the Lazarus Group, also known as TraderTraitor, which used social engineering to compromise employee systems over several months. North Korea rejected the accusation and launched multiple missiles into eastern waters hours later.

Binance reported that attackers first compromised a Wallet DevOps engineer in June through a tampered homebrew installation for an AI coding tool. In September a software engineer received a fake job offer via a legitimate platform, completed two interview rounds that included a malware-laden assignment, and allowed access to internal tools. On October 20 the intruders pivoted to additional engineer accounts; on October 29 they executed a script that drained assets. Of the $6.34 billion taken, $2.85 billion has been frozen. Binance stated it absorbed the loss, replenished 98 percent of affected tokens, and added AI anomaly detection.

The FBI linked the same group to a prior $1.5 billion Bybit theft. Laundering the stolen funds is expected to require months. North Korea’s Kim Yo Jong called the FBI announcement “an extension of Washington’s invariable hostile policy” and said dialogue with “unreliable and hostile persons” served no national interest. South Korea’s Joint Chiefs of Staff confirmed several missiles fired eastward and said allied forces remain on alert.

The missile launches occurred on the same day as U.S. midterm vote counting and followed recent North Korean weapons tests and shipyard activity. Binance has rebuilt affected wallets and credentials. No independent forensic confirmation of the FBI attribution has appeared in public reporting from multiple outlets.