North Korea's rise as a state cybercrime leader predates the Binance hack

North Korea is the suspected perpetrator of the October heist on Binance, the world's largest cryptocurrency exchange, where approximately $6.36 billion was stolen in 20 minutes, marking the largest hack of its kind. The FBI and blockchain analytics firms have attributed the attack to North Korea's TraderTraitor hacking unit. This incident follows a pattern of North Korean state-sponsored cyber theft, including the 2019 Upbit hack ($42 million) and the 2025 Bybit hack ($1.5 billion). North Korea's cyber capabilities developed since the 1980s, with intensified training programs producing an estimated 8,400 state-sponsored hackers by 2024. North Korea's cyber operations have shifted from early disruption attacks to revenue generation, with a 2024 UN panel estimating stolen funds account for half of the country's foreign currency income and 40% of its weapons of mass destruction programs. Current defenses remain limited by national jurisdictions, though experts suggest strengthening identity verification and information-sharing could reduce the profitability of these attacks.