5 of 5 regions · 70 articles · 51 outlets
FBI attributes $6 billion Binance crypto theft to North Korean hackers
The FBI said North Korean hackers orchestrated the theft of billions of dollars from the Binance cryptocurrency exchange within minutes, which it described as the largest crypto heist in history. Reports link the group to TraderTraitor, also known as Lazarus.
Coverage over time
| Bucket start | United States | Europe | India | China | Russia |
|---|---|---|---|---|---|
| 30 Oct, 00:00 | 1 | 0 | 0 | 0 | 0 |
| 30 Oct, 06:00 | 0 | 4 | 2 | 0 | 2 |
| 30 Oct, 12:00 | 0 | 6 | 3 | 0 | 2 |
| 30 Oct, 18:00 | 5 | 1 | 3 | 0 | 0 |
| 31 Oct, 00:00 | 1 | 2 | 1 | 0 | 0 |
| 31 Oct, 06:00 | 0 | 1 | 0 | 0 | 0 |
| 31 Oct, 12:00 | 1 | 0 | 0 | 0 | 0 |
| 31 Oct, 18:00 | 3 | 11 | 0 | 1 | 4 |
| 1 Nov, 00:00 | 2 | 1 | 4 | 0 | 4 |
| 1 Nov, 06:00 | 0 | 2 | 0 | 0 | 3 |
First reported by Just the NewsPrivate: Commercially owned
What each region is saying
- United States13
Sampled US coverage names North Korea's TraderTraitor as the main suspect, citing blockchain firms and the FBI. Trump's remark of uncertainty and Binance's non-confirmation also appear.
Tone · alarmed, matter-of-factRead: New York Post - Europe28
Sampled EU coverage reports FBI and analytics-firm attribution to TraderTraitor. Some pieces add context on North Korea's wider cybercrime and Binance's compensation.
Tone · analytical, dramaticRead: Der Spiegel - India13
Sampled Indian coverage relays TRM Labs and Chainalysis attribution, the FBI's blame and Binance's freezing of assets. It adds Trump's remarks and market effects.
Tone · neutral, alarmedRead: The Times of India - China1
FBI blames North Korea for stolen billions from Binance in biggest hack in history
South China Morning Post - Russia15
Sampled Russian coverage mostly reports the FBI accusation, with state outlets using attributive wording. Exile outlets add the Russia infrastructure angle.
Tone · accusatory, skepticalRead: Kommersant
Framing comparison
Where they agree
7 shared facts- 01
Reports from several blocs say TRM Labs attributed the Binance attack to the North Korean group TraderTraitor.
- 02
US, EU and Indian reports say both TRM Labs and Chainalysis pointed to a North Korean group.
- 03
US, EU, Indian and Russian reports say the FBI blamed North Korea for the theft of more than $6 billion.
970e3b…b979e9… - 04
US, EU and Indian reports say Binance said about $3 billion in assets was frozen.
f20d61… - 05
US, EU and Russian reports say Binance said it would cover the losses.
- 06
EU, Indian and Russian reports say the FBI expected or observed laundering of the stolen assets.
970e3b… - 07
EU and Russian reports cite a Binance statement that 90% of stolen funds was covered or reimbursed.
Where they differ
2 questionsCertainty of North Korean responsibility
- United States
President Trump said 'We don't know' who was behind the attack.
- Europe
One outlet says the FBI holds North Korea responsible.
- India
One report says Binance had not yet confirmed who was behind the attack.
- Russia
One state outlet says US law enforcement claims a North Korea link without providing evidence.
Share of stolen funds recovered or covered by Binance
- United States
Not addressed
- Europe
One outlet reports a Binance spokesperson saying about 80% of stolen assets were secured.
- India
Not addressed
- Russia
One outlet says Binance reimbursed clients 90% of stolen funds by the evening of November 1.
Not enough coverage to include: China.
In depth, region by regionemphasis · omissions · who is quoted
United Statesalarmed, matter-of-fact
Sampled US coverage names North Korea's TraderTraitor as the main suspect, citing blockchain firms and the FBI. Trump's remark of uncertainty and Binance's non-confirmation also appear.
What it emphasises
One outlet cites experts and TRM Labs pointing to North Korea.
Some headlines say the FBI blames North Korea.
One report notes the scale as the largest crypto hack.
9d5bb6…
What it leaves out
Reported by other regions, but not here.
The 90% reimbursement figure is not found in this sample.
FBI laundering expectations are not found in this sample.
970e3b…
How it portrays the people involved
- TraderTraitorAntagonistNorth Korea-based group
- BinanceVictim
Who gets quoted
- TRM Labs
- Chainalysis
- FBI
- Trump
- Binance co-CEO Richard Teng
- SlowMist
Based on 8 articles.
Europeanalytical, dramatic
Sampled EU coverage reports FBI and analytics-firm attribution to TraderTraitor. Some pieces add context on North Korea's wider cybercrime and Binance's compensation.
What it emphasises
Several outlets report FBI attribution.
One outlet gives UN panel context on North Korea's cyber activity.
3a6638…3a6638…Binance recovery and cover figures are reported.
What it leaves out
Reported by other regions, but not here.
Trump's remark that his administration is looking into the hack is not found in this sample.
How it portrays the people involved
- North Korea / TraderTraitorAntagonist
- BinanceVictim
Who gets quoted
- FBI
- TRM Labs
- Chainalysis
- Binance co-CEO Richard Teng
- Ciaran Martin
Based on 8 articles.
Indianeutral, alarmed
Sampled Indian coverage relays TRM Labs and Chainalysis attribution, the FBI's blame and Binance's freezing of assets. It adds Trump's remarks and market effects.
What it emphasises
Experts link proceeds to North Korea's weapons programs.
Trump said the US does not know and is looking into it.
Market declines are noted.
What it leaves out
Reported by other regions, but not here.
The 90% reimbursement figure is not found in this sample.
How it portrays the people involved
- TraderTraitorAntagonist
- BinanceVictim
Who gets quoted
- TRM Labs
- Chainalysis
- FBI
- Trump
- Binance
Do its outlets agree?
Some outlets say analysis firms believe the group 'could be' behind it, while another reports the FBI blaming North Korea.
Based on 8 articles.
China
Too little coverage to characterise — only 1 article from Chinese outlets was found. Nothing is inferred.
Russiaaccusatory, skeptical
Sampled Russian coverage mostly reports the FBI accusation, with state outlets using attributive wording. Exile outlets add the Russia infrastructure angle.
What it emphasises
One state outlet says the claim came without evidence.
Reports detail FBI-published wallet addresses.
Exile outlets cite Russian infrastructure links.
What it leaves out
Reported by other regions, but not here.
Trump's remark is not found in this sample.
The $3 billion freeze is not found in this sample.
f20d61…
How it portrays the people involved
- FBIProtagonistin state outlets' headlines
- North KoreaAntagonist
- BinanceVictim
Who gets quoted
- FBI
- Binance spokesperson
- BBC
- UN expert group
Do its outlets agree?
A state outlet says the FBI claim came without evidence, while exile outlets stress Russia links and specialists' views.
Based on 8 articles.
Confidence and methodMedium confidence
- Claims checked
- 114 of 114
- Articles analysed
- 32
- Model
- claude-sonnet-5-5
- Cost
- $0.16
Every point above rests on a quote found verbatim in the stored article text; claims whose quote could not be found were dropped. This describes framing — it is evidence to examine, not a verdict on who is right. .
- Several articles are headline-plus-lead only.
- CN had too little coverage and is not described.
- Quotes are translated from German, Italian, Hindi and Russian.
- Some figures differ between reports and may reflect timing.
- Not enough verified coverage to describe: CN.
- 17 of 33 articles were analysed from headline and lead only.