How North Korea perfected the crypto heist

The world's biggest crypto heist is the latest feat by North Korean hackers who have spent years perfecting an arsenal of financial theft, social engineering and sophisticated cyberattacks. Why it matters : The suspected North Korean hackers behind the $6.3 billion Binance theft appear to have combined familiar hacking tactics with extraordinary speed and automation — raising fresh questions about how AI could supercharge their already sophisticated operations. Driving the news : Binance said late Thursday that its blockchain partners have frozen at least $3 billion of those $6.3 billion assets on-chain so far, and it believes the hackers gained initial access by compromising one engineer's laptop alongside other "points of breach." Several blockchain investigation firms have tied the hack to TraderTraitor, a group linked to the North Korean government's Lazarus Group collective. Binance co-CEO Richard Teng said in a video on social media Friday that the attackers also used a "self-destruct mechanism that destroyed tooling and traces" as they went, making it more difficult to investigate what happened. "This was a complex attack," he said. The big picture: North Korean government hackers have spent more than a decade carrying out financial heists and disruptive cyberattacks, and they have turned cryptocurrency theft into an industrial-scale operation. In 2016, hackers attempted to steal nearly $1 billion from Bangladesh's central bank, successfully making off with $81 million. In 2017, North Korea was blamed for the WannaCry ransomware outbreak , which disrupted hundreds of thousands of computers across more than 150 countries. In recent years, the country has intensified its focus on pillaging crypto exchanges in part because the digital assets can more easily be transferred and laundered across borders — although those attacks tend to leave more of a paper trail. The same North Korean hacking group, TraderTraitor, also set the last record for the world's largest c