FBI正式认定：60多亿美元币安被盗案系朝鲜所为
美国联邦调查局（FBI）10月31日发布网络安全通报，正式认定朝鲜对加密货币交易所币安（Binance）60多亿美元虚拟资产被盗案负责。通报说，这起盗窃发生在10月29日前后，被盗金额超过60亿美元；FBI把朝鲜这组恶意网络活动代号定为「TraderTraitor」。
此前，区块链分析公司 TRM Labs 已研判本案出自朝鲜黑客组织 TraderTraitor，币安当时表示自家调查尚未确认攻击者身份，FBI与美国特勤局介入调查的消息也已见诸报道。这次通报是美国执法机构首次以官方名义对本案作出归因。
FBI说，该局与美国特勤局（USSS）、国税局刑事调查部门（IRS-CI）一道观察到，TraderTraitor 行动者正把被盗资产主要兑换成以太币（ETH）。通报预计，这些资产随后还会经去中心化金融（DeFi）与即时兑换服务进一步转换，进入后续洗钱阶段。
三家机构敦促私营部门配合拦截：包括 THORNode 运营者、RPC 节点运营者、即时交易所、DeFi 服务、区块链分析公司与其他虚拟资产服务商在内，应封堵与通报所列地址有关、或源自这些地址的交易。FBI在通报中公布了一长串持有或曾经持有被盗资产的以太坊地址，称这些地址由朝鲜 TraderTraitor 行动者运营或与其密切相关。
FBI表示，该局将继续识别、缓解与打击朝鲜的非法网络犯罪与虚拟资产盗窃活动；掌握线索的人可联系当地 FBI 办事处，或通过FBI互联网犯罪投诉中心（IC3）提交信息。
本案是加密货币行业有记录以来规模最大的一起盗窃。币安此前公布，事件估计总影响约63亿美元，约30亿美元受影响资产已被合作伙伴冻结在链上，公司称将动用用户安全资产基金（SAFU）与公司资金承担全部损失。
关联：63亿美元被盗：币安遭遇史上最大加密货币盗窃，约30亿已被冻结，公司称全额赔付
关联：跟进：63亿美元币安被盗案：FBI与美国特勤局介入调查，签名系统被攻破、约24亿美元资产恐难追回
FBI: North Korea Responsible for $6 Billion+ Binance Theft
The Federal Bureau of Investigation (FBI) released a cybersecurity advisory on October 31 formally attributing the theft of more than $6 billion in virtual assets from cryptocurrency exchange Binance to North Korea. The theft took place on or about October 29, 2026, and the FBI refers to this North Korean malicious cyber activity as TraderTraitor.
Blockchain analytics firm TRM Labs had previously assessed that the attack came from the North Korean TraderTraitor group, while Binance said its own investigation had not confirmed the attacker's identity, and the FBI and U.S. Secret Service involvement had already been reported. The advisory is the first official attribution of the case by U.S. law enforcement.
The FBI said that, together with the U.S. Secret Service (USSS) and IRS Criminal Investigation (IRS-CI), it has observed TraderTraitor actors converting the stolen assets primarily into Ethereum (ETH). The assets are expected to be further laundered by converting them using DeFi and instant swap services.
The three agencies urged private-sector entities, including THORNode operators, RPC node operators, instant exchanges, DeFi services, blockchain analytics firms and other virtual asset service providers, to block transactions with or derived from the addresses the actors are using to launder the stolen assets. The advisory lists a long series of Ethereum addresses that are holding or have held assets from the theft and are operated by or closely connected to North Korean TraderTraitor actors.
The FBI said it remains committed to identifying, mitigating and disrupting North Korea's illicit cybercrime and virtual asset theft, and asked anyone with information to contact a local FBI field office or the FBI's Internet Crime Complaint Center at ic3.gov.
The case is the largest cryptocurrency theft on record. Binance has said the incident affected an estimated $6.3 billion, that about $3 billion in affected assets had been frozen on-chain by partners, and that it would cover all losses through its Secure Asset Fund for Users (SAFU) and company funds.
来源：GSM·美国（原文链接）
图片来源：图：位于华盛顿的美国联邦调查局（FBI）总部胡佛大楼。GSM自家图库联邦素材包固定图。 / The J. Edgar Hoover Building, FBI headquarters in Washington. GSM federal asset-pack file photo.
- 2026-10-29 22:1263亿美元被盗：币安遭遇史上最大加密货币盗窃，约30亿已被冻结，公司称全额赔付
- 2026-10-30 06:58跟进：63亿美元币安被盗案：FBI与美国特勤局介入调查，签名系统被攻破、约24亿美元资产恐难追回
- 2026-10-30 22:08跟进：币安63亿美元被盗案：CFTC主席称愿给交易所一条联邦注册选项
- 2026-10-31 15:29FBI正式认定：60多亿美元币安被盗案系朝鲜所为本篇
