A suspected $6.3 billion cyber theft from cryptocurrency exchange Binance is being linked by experts to actors associated with North Korea, after an operation that reportedly stretched across months of preparation. Authorities and analysts point to the scale as one of the largest crypto thefts recorded, involving a mix of workplace manipulation and technological intrusion to reach systems that authorize digital asset transfers. According to experts, the stolen funds help support a sanctioned government and its weapons programs. Binance said its attackers targeted an engineer as early as June, after the person tried to install an AI-supported coding tool. Binance security identified suspicious activity and took preventive steps by replacing the worker’s device and credentials. Despite those measures, the attackers had already obtained important information about the engineer’s responsibilities and their colleagues’ roles, setting up the next phases of the operation. The report describing the breach was published on 3 November. Legal status remains at the investigation stage, with the suspected link to North Korea based on expert attribution rather than a court outcome.