FBI Attributes $6.36 Billion Binance Crypto Theft to North Korean TraderTraitor Hackers

Analysis
The FBI's attribution shifts the problem from naming the thief to denying laundering routes for roughly $2.4 billion in ETH and BTC that no issuer can freeze. The alert's call for THORNode operators, RPC providers, instant exchanges and DeFi platforms to block listed addresses puts compliance burdens on infrastructure operators, not just exchanges. Binance's account of a compromised engineer laptop, not stolen keys, points to a human-access failure other exchanges can audit now. It is unlikely that OFAC designates individuals, entities or crypto addresses explicitly linked to the Binance theft by December 3. Treasury could still move faster, since the theft's unprecedented scale may prompt a sanctions package beyond existing designations. We have high confidence in the attribution, since four outlets report consistently and the FBI's existing TraderTraitor attribution already sits under North Korea sanctions authorities, though the outlets appear to share underlying material and so are not independent confirmation. If OFAC designates, compliance teams must screen against a binding list with penalty exposure. If it does not, they rely on voluntary blocklists and issuer freezes that leave ETH and BTC flows exposed.