North Korea’s $6.3B Binance Theft Has a Name: “TraderTraitor” 🕵️

The FBI attributed the theft of about $6.3 billion in digital assets from cryptocurrency exchange Binance to North Korea, describing the operation as part of the Democratic People’s Republic of Korea’s malicious cyber activity. In a news release issued on Saturday, the agency said the responsible group is tracked as “TraderTraitor.”

The FBI said TraderTraitor has recently converted stolen assets mostly into Ether (ETH), with more conversions expected through DeFi and instant swap services as the hackers advance to more sophisticated laundering stages. Private sector entities, including THORNode operators, RPC node operators, instant exchanges, DeFi services, blockchain analytics firms and other digital asset service providers, were urged to block transactions involving addresses used to launder the stolen assets.

North Korea-linked hackers accounted for about 60% of the value lost to crypto hacks in 2025, according to Cointelegraph, with proceeds used to help fund the regime’s nuclear and ballistic missile programs. A CertiK report attributed more than $2 billion of an estimated $3.4 billion in 2025 crypto security losses to groups tied to North Korea across 79 of 656 documented incidents, while related reporting said crypto losses from North Korea hackers in 2025 rose 51% YoY.

North Korea does not publish credible budget data, but independent research organization MilitarySpend estimated its actual annual defense spending at as much as $6 billion using purchasing-power-adjusted GDP figures. The estimate is uncertain. Revenue from arms transfers to Russia, estimated at as much as $5 billion in munitions exported from 2022-2025 according to South Korean intelligence, supplements domestic weapons programs, alongside cryptocurrency theft that provides off-budget financing for WMD development.

CertiK found that North Korea-linked actors stole an estimated $6.75 billion in cryptocurrency across 263 documented incidents between 2016 and early 2026, citing findings by independent onchain researcher Taylor Monahan. Its analysis concluded that North Korea has industrialized crypto theft into a core state revenue mechanism.