FBI and Secret Service probe record $6.3 billion Binance hack tied to North Korea

The FBI and the United States Secret Service (USSS) have opened an investigation into the Binance Holdings Ltd. breach, which Reuters said involved $6.3 billion and is being treated as the largest hack on record. For PSPs and exchanges, the useful part is not the headline number; it is the way U.S. agencies are describing offshore crypto venues, fund-tracing, and the compliance gap they see around them.

1. The FBI said it is aware of the incident and is working with public and private partners to determine the scope of the actors’ activities, assess potential impacts, and coordinate investigative actions. The USSS said its investigators are working around the clock with private partners, including Circle, to identify, freeze, trace, and recover funds stolen from Binance Holdings Ltd.
2. Binance Holdings Ltd. is cooperating with both agencies. Reuters reported that the breach involved $6.3 billion, making it the largest hack on record. Binance said the losses came from unauthorized withdrawals of virtual assets after an attack that exploited a hacked engineer’s laptop and a flaw in the transaction approval system.
3. Blockchain intelligence firm TRM Labs and other analysts assessed that there is a high likelihood the attack involved North Korea’s elite hacking group “TraderTraitor.” The FBI previously named TraderTraitor as a suspect in the roughly $1.5 billion theft from another cryptocurrency exchange, Bybit, last year.
4. U.S. financial authorities used the incident to point to security vulnerabilities at offshore exchanges operating in regulatory blind spots. Michael Selig, a Commissioner at the Commodity Futures Trading Commission (CFTC), told CNBC that “these are unregulated offshore exchanges” and that they lack the safeguards present in U.S. financial markets.
5. Selig also said the CFTC announced a push on the 26th for voluntary federal registration of virtual asset exchanges, giving firms a federal option to register and comply with cybersecurity safeguards similar to those in traditional financial markets. He added that crypto can move funds faster than traditional assets and can obscure the source or destination of funds, but said the blockchain still makes tracing possible.

Binance Holdings Ltd. was founded in Hong Kong, later moved its headquarters to Japan and Malta, and currently has no official headquarters. That detail matters because the current U.S. response is not just about one hack; it is also a reminder that offshore structures, wallet tracing, and regulator access are now part of the operating risk for high-risk payment flows.