Cryptocurrency exchange Binance is working to recover $6.3 billion in digital assets stolen during a major cyber attack, which is believed to be the largest heist of its kind. The company announced that it has successfully frozen approximately $3 billion of the compromised funds, though a significant portion remains in the hands of unidentified perpetrators.
The global trading platform initially reported that the security breach might have originated from a compromised laptop belonging to a DevOps engineer. However, subsequent internal investigations revealed a far more extensive breach. According to Binance co-chief executive Richard Teng, the attackers utilised a self-destruct mechanism that erased tooling and technical traces, complicating efforts to trace the stolen assets.
Suspected North Korean Involvement and Investigations
Multiple blockchain analytics firms, including Chainalysis and TRM Labs, have linked the intrusion to cyber units associated with North Korea, pointing out similarities to previous high-profile cryptocurrency thefts such as the Bybit exchange breach. North Korea has consistently denied engaging in cybercrime, despite international reports suggesting the regime uses illicit digital activities to raise capital.
United States federal authorities have also joined the effort to investigate the incident and track the missing assets, which include US-linked stablecoins such as Tether and Circle. The US Secret Service confirmed it is coordinating efforts alongside the FBI to identify the responsible parties and recover funds. Binance clarified that its dedicated US platform was not directly impacted by the attack.
Customer Reassurances and Legal Skepticism
In response to the breach, Binance reassured its registered users that customer balances remain secure and promised to cover all incurred losses. While the company briefly halted all account transactions, it later confirmed that deposit functions were fully operational.
Despite the firm’s assurances that its balance sheet can withstand the loss, legal commentators and industry observers have raised concerns. Experts note that corporate promises to compensate users may depend heavily on contractual terms, advising that affected customers might need to seek legal remedies if promises are not fulfilled.
Source: BBC News
