FBI Links North Korea to Binance Hack, Urges Providers to Block Transactions
The FBI named THORNode operators, RPC node operators and decentralized finance services in its request to block transactions from dozens of addresses tied to the breach.

The FBI linked the Democratic People’s Republic of Korea (DPRK) to a $6 billion hack of Binance and urged virtual asset service providers to block transactions involving dozens of addresses tied to the breach.
The request names THORNode operators, RPC node operators and decentralized finance (DeFi) services. It calls on those providers to stop transactions from the identified addresses, extending the FBI’s appeal beyond the exchange affected by the hack.
The agency’s request focuses on addresses associated with the breach. Its recipients include virtual asset providers and the named node operators and DeFi services. The FBI linked DPRK to the incident and asked those providers to act.
The call is a request to block transactions, not confirmation that providers have completed the step. The breach highlights ongoing security concerns across the crypto ecosystem, while the FBI’s appeal centers on stopping activity tied to the identified addresses.