Why North Korea's 'elite' hackers are the prime suspect in major Binance hack

Two blockchain analytics firms say intelligence points to a North Korean state-backed group as the likely perpetrator of the $6.3bn hack involving Binance, the world’s largest cryptocurrency exchange.

Analytics firms point to state-backed actors

The firms say they have robust intelligence connecting the incident to a North Korean group. Their assessment identifies the suspected hackers as state-backed rather than independent criminals, although the available information describes the group as the likely culprit rather than confirming its responsibility.

Why the Binance breach matters

The scale of the reported theft places the incident among major attacks affecting the cryptocurrency industry. Binance’s position as the world’s largest cryptocurrency exchange means the suspected breach has drawn attention beyond a single digital-asset platform.

The attribution also highlights the role of blockchain analytics firms in examining major cryptocurrency attacks. Their intelligence is being used to link the Binance incident to a specific state-backed group, giving the reported hack a broader cyber-security dimension.

What is known

The information available identifies two analytics firms as the source of the assessment and puts the reported loss at $6.3bn, equivalent to £4.7bn. No further details about the attack, the group’s identity or the consequences for Binance are provided.

For now, the North Korean connection remains a reported attribution based on the firms’ intelligence. The central fact is the scale of the suspected hack and the scrutiny directed toward a state-backed group.