Binance reports $6.3bn hack, freezes $3bn; analysts attribute attack to North Korean group
Unbiased summary
Binance, the world's largest cryptocurrency exchange, reported a hack affecting approximately $6.3 billion in assets late Thursday. The company froze about $3 billion of the affected funds and stated it would cover all customer losses. An initial investigation suggested the breach began with a compromised engineer's laptop, though Binance later mentioned additional points of breach. Blockchain analytics firms TRM Labs, Elliptic, and Chainalysis attributed the attack with 'high confidence' to TraderTraitor, a North Korean state-backed hacking unit also known as Lazarus Group. Deposits and withdrawals were temporarily suspended. Binance has 335 million registered users and holds roughly $162.8 billion in assets under custody. The incident is the largest crypto hack on record, surpassing last year's $1.5 billion Bybit theft also blamed on North Korea.
Generated with deepseek-flash (DeepSeek)
Coverage by outlet
The Guardian
left
Angle
Frames the hack as a historic, record-breaking heist with strong emphasis on expert attribution to North Korea.
Bias
The Guardian leads with 'largest heist in history' and repeatedly stresses the unprecedented scale, quoting an expert calling it 'almost certainly the largest theft of any kind in history.' It gives prominent space to North Korean attribution and background on past hacks. It includes standard company reassurances but downplays Binance's regulatory history (e.g., money laundering guilty plea) and focuses on the magnitude and state-sponsored cybercrime angle.
BBC News
centre-left
Angle
Provides explanatory context on North Korea's hacking ecosystem and Binance's background, with a measured tone.
Bias
The BBC emphasizes the 'elite' nature of North Korean hackers and provides extensive background on the Lazarus Group, Sony Pictures hack, and North Korea's cyber operations. It also notes Binance's 2023 money laundering guilty plea and a 2024 lawsuit alleging links to terrorist organizations. While it attributes the hack to North Korea with 'high confidence' based on firms, it maintains a neutral, explanatory stance and includes caveats like Pyongyang's denial of cybercrime.
The Independent
centre-left
Angle
Focuses on the practical impact on users and expert commentary on crypto security, with a 'what we know' format.
Bias
The Independent leads with the hack as 'the largest bank heist in human history' but quickly pivots to user impact, noting suspended deposits and withdrawals. It quotes a fincrime expert on why crypto platforms are targeted and emphasizes Binance's assurance that funds are safe. It omits detailed attribution to North Korea in the excerpt, instead focusing on the mechanics and industry reaction. It stays relatively close to factual reporting but adopts a slightly sensational tone with the 'heist' framing.
City AM
centre-right
Angle
Presents a business-oriented account emphasizing Binance's response and market reaction, with cautious attribution.
Bias
City AM notes the hack affected $6.3bn, half frozen, and highlights Binance's promise to cover losses. It mentions North Korean involvement as a suggestion, noting 'its involvement has not been confirmed,' which is more cautious than other outlets. It also brings in Binance's founder Changpeng Zhao's money laundering guilty plea and pardon by Trump, providing regulatory context. It emphasizes market impact (bitcoin falling) and company statements, with a balanced but business-focused lens.
Daily Mail
right
Angle
Sensationalist framing of the hack as a record-breaking North Korean cyber heist, with emphasis on Binance's contradictory messaging.
Bias
The Daily Mail leads with 'Hackers steal $6.3BILLION' and stresses the North Korean blame. It highlights Binance's 'sometimes contradictory messages' on X, noting the tension between 'user funds are completely safe' and 'cover all losses.' It repeats the record-breaking scale and North Korean attribution but does not provide much context on Binance's regulatory issues. The tone is more alarmist and focuses on the drama of the heist rather than balanced explanation.
The Sun
right
Angle
Highly sensationalist and personality-driven, framing the hack as part of North Korea's 'hacktocracy' under Kim Jong-un.
Bias
The Sun uses emotive language like 'tubby tyrant' and 'cyber pirates' and pushes a narrative of North Korea becoming the 'world's first hacktocracy.' It includes unverified or speculative claims (e.g., conscripting primary school prodigies as young as five) and emphasizes the scale of North Korean cyber theft, with estimates of up to £6bn. It omits Binance's regulatory context and focuses on dramatic expert commentary. This coverage strays far from neutral reporting by adopting a tabloid, alarmist tone and speculative framing.