North Korean hackers stole approximately USD 6.36bln from Binance in what blockchain intelligence firm TRM Labs described as the largest cryptocurrency theft on record

North Korean hackers stole approximately USD 6.36bln from Binance in what blockchain intelligence firm TRM Labs described as the largest cryptocurrency theft on record.

Attribution of a theft of this scale to North Korean state-linked actors fits a well-established pattern: DPRK-affiliated groups have been the most persistent perpetrators of large crypto exploits over multiple years, with proceeds consistently linked by investigators and sanctions authorities to Pyongyang's sanctions-evasion and weapons funding programmes. The usual sequence in such episodes is an initial exploit followed by rapid dispersal across wallets, chains and bridges, then layering through mixers and OTC desks, with the tracing and freezing response led by blockchain intelligence firms, stablecoin issuers and exchanges in cooperation. The headline figure, if borne out, would put this materially above prior record thefts, which matters for the exchange question: historically the first test after a loss of this size has been whether the venue absorbs it from its own resources or insurance arrangements, and whether withdrawal flows and proof-of-reserves attestations hold up in the following days. The 'largest on record' framing itself warrants caution until on-chain tracing is independently confirmed, since initial loss estimates in past episodes have been revised as attribution firmed up. The follow-ons worth watching are the exchange's own statements on reserve coverage, stablecoin issuer freeze actions against flagged addresses, and any sanctions designations that would formalise the state attribution.