Binance Hack Linked to North Korea Fuels Crypto Sell-Off

Blockchain analytics firms Chainalysis and TRM Labs have linked the reported $6.3 billion to $6.4 billion Binance hack to TraderTraitor, a hacking group associated with North Korea. Binance’s initial investigation points to an engineer’s compromised laptop and unauthorised access to a service container; it has found no evidence so far that wallet private keys were leaked. TRM said funds were taken across 10 blockchains, with most moved within about 20 minutes, using rapid, automated transfers. As freezes began, the attacker reportedly converted $325 million in stablecoins into $285 million of ether and moved another $175 million to other wallets. Tether, Circle and First Digital said they froze stolen tokens. Binance reported about $3 billion in assets frozen or protected on-chain, while TRM said the attacker still held more than 420,000 ETH and 18,270 BTC. Binance has reserved more than $6.34 billion to cover losses, including funds already held in the stolen tokens, and plans to update its Proof of Reserves. The Binance hack added to market jitters. Bitcoin fell towards $76,000 and was later reported near $76,700. Total crypto liquidations reached $1.5 billion, including $468 million in BTC and $358 million in ETH, with long positions accounting for most losses. A separate Polymarket security incident involving more than $2.6 million in user funds added to concerns. Traders will watch asset recovery, official investigations and exchange security updates; prices could remain under pressure while the scale of recoveries is unclear.
Bearish
The incident is bearish for BTC and ETH in the near term because the reported theft, uncertainty over asset recovery and concerns about exchange security can weaken risk appetite and prompt traders to reduce exposure. The market reaction described in the reports—bitcoin falling towards $76,000 and $1.5 billion in liquidations, largely affecting long positions—shows how security shocks can amplify selling and volatility. Continued movement of stolen funds or delays in confirming recoveries could add pressure. Over the longer term, freezes, Binance’s loss coverage and evidence that private keys were not compromised may help contain the fallout and rebuild confidence. However, these measures do not remove the broader security risk, so the outlook remains vulnerable to new disclosures and further market deleveraging.