Theregister North Korean Hackers Target Binance in $6.3B Crypto Heist
Article Content
- •FBI links $6.3B Binance heist to North Korean hackers.
- •Attack involved sophisticated techniques exploiting exchange vulnerabilities.
- •Incident raises concerns about the security of cryptocurrency platforms.
The FBI has attributed a significant $6.3 billion heist from the Binance cryptocurrency exchange to North Korean hackers. This attack involved sophisticated techniques that exploited vulnerabilities within the exchange's infrastructure. The breach reportedly allowed attackers to siphon off large amounts of cryptocurrency, impacting numerous users and raising concerns about the security of digital assets. The FBI's investigation indicates that this incident is part of a broader pattern of state-sponsored cybercrime linked to North Korea. As of now, the full extent of the impact on Binance's operations and user trust remains to be seen. The exchange has not confirmed specific details about the vulnerabilities exploited or the exact timeline of the attack. This incident underscores the ongoing threat posed by state-sponsored cyber actors in the cryptocurrency space.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (4)
Following this threat?
Track Ubuntu in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What was stolen in the Binance attack?
How did the FBI confirm North Korea's involvement?
What steps is Binance taking following the breach?
Continue Reading
Critical RCE Vulnerability in Prefab UI Disclosed A critical remote code execution vulnerability, CVE-2026-120338, was disclosed on November 1, 2026, affecting Prefab UI's Generative UI sandbox. The flaw allows attackers to execute arbitrary Python code by exploiting Deno's permissions, enabling file read/write access on the host server. This vulnerability affects…
China-Linked Hackers Exploit PHP2Shell Vulnerabilities to Breach U.S. Government Systems On October 21, 2026, the PHP development team released patches for two critical vulnerabilities in PHP, known as PHP2Shell (CVE-2026-109618 and CVE-2026-109619), which allow unauthenticated remote code execution. These vulnerabilities were actively exploited by a suspected China-linked threat actor who compromised 25…