According to The Block, investigators have linked the breach of Binance’s hot‑wallet signing infrastructure to actors associated with North Korea. The compromise occurred at a specific point in time when the signing components were accessed or manipulated by unauthorized parties. Funds that were stored in those wallets were subsequently moved out of the platform’s custody. The source does not provide further detail on the exact amount withdrawn, the timing of the withdrawal beyond the breach event, or the precise method used to gain access.
The investigation focused on how the signing infrastructure was breached and traced the flow of assets away from Binance’s hot wallets. No additional parties, timelines beyond the breach moment, or financial figures beyond the $6 billion estimate are mentioned in the source.
