Security firms have linked a record $6.3 billion hack of crypto exchange Binance to North Korea, the BBC, CBS News and TechCrunch report. About half the stolen money, some $3 billion, has been frozen, the outlets report.

Blockchain firm TRM Labs said the attack was carried out by a North Korean hacking unit called TraderTraitor, CBS News reports. "We make this judgment with high confidence," the firm said. TRM said about $6.36 billion was moved out of Binance wallets on 10 blockchains, most of it in about 20 minutes. Chainalysis chief Jonathan Levin also said the group was likely behind it, CBS News reports.

The same unit hit the Bybit exchange in 2025, leading to a $1.5 billion loss, the FBI has said, CBS News reports. Analysts say TraderTraitor is part of North Korea's wider Lazarus Group, the outlet reports.

Binance first said the attack may have started with an engineer's hacked laptop, the outlets report. It later said there were more "points of breach." "This was not carried out by one person," co-CEO Richard Teng said, the BBC reports. He said the hackers used a tool that wiped their traces as they went.

Binance says deposits are not affected, the outlets report. Withdrawals are paused and should resume in a day or two, CBS News reports. The company says it will cover every customer loss. Binance said it has seen no sign that its private keys leaked, TechCrunch reports.

The US Secret Service said it is "working around the clock" to trace and recover the funds, the BBC reports. Binance says it is also working with the FBI. The exchange has more than 300 million users, the BBC reports.

What we know: About $6.3 billion was stolen, and about $3 billion has been frozen.
What we don't: Exactly how the hackers got in and how much more can be recovered.