North Korea's TraderTraitor group reportedly moved about $6.36 billion out of Binance wallets across 10 blockchains. Most of it left in about 20 minutes.
Twenty minutes. Your last "quick scalp" took three weeks and ended in a tax loss.
TraderTraitor. Even the hackers have a name that sounds like a retail trading podcast. The difference is that this group has a track record. TRM Labs says it resembles the Bybit job from February 2025. That is called a portfolio. Yours is called a screenshot.
Investigators now call the recovery a "cat and mouse game." Cat and mouse implies the cat has a chance. Here the mouse is a state-sponsored hacking unit that, per Chainalysis, takes about 45 days to launder a haul through Chinese-language money services and mixers. The cat is a compliance officer named Dennis with a Chainalysis login.
Binance says it froze assets. First it said about $3 billion. Then it said $5 billion. That is the first time anyone at an exchange has revised a number upward and meant it.
Binance also pledged to cover all losses through its Secure Asset Fund for Users. SAFU. The acronym has now been tested against North Korea and presumably found to be a vibe.
This is the world's largest crypto exchange. It holds the savings of millions of people who read "not your keys, not your coins" and then handed their keys to a company anyway.
Meanwhile, a nation under heavy UN sanctions just scored the biggest crypto theft on record, reportedly to fund weapons programs. It did not need a Discord, a moon emoji, or a guy named CryptoChad88 telling it to buy the dip. It needed patience and a better security team than the exchange.
Kim Jong Un now has a bigger crypto position than anyone you follow on X, and he got in without paying the fees.
Photo by Kanchanara on Unsplash
Leave a Comment