FBI Blames North Korea for Record $6.3B Binance Hack

The story of the day

The FBI’s Saturday announcement that North Korea orchestrated Binance’s $6.3B hack—now the largest crypto theft in history—throws a harsh light on AI’s growing role in laundering and obfuscation. Pyongyang’s playbook has long relied on mixing stolen funds through shell entities and decentralized exchanges, but the scale here suggests automated, AI-driven layering: rapid cross-chain swaps, synthetic identity generation, and adversarial evasion of compliance tools. For builders, this means two things: (1) KYC/AML vendors will now demand AI-native detection for anomalous transaction patterns, and (2) any model trained on public blockchain data risks ingesting tainted inputs. The cost of ignoring this? Secondary sanctions exposure.

New tools & launches

Parameter Labs’ ChatGPT Exploit PoC — Proof-of-concept demonstrating how sandboxed iframes in OpenAI’s HTML previews (formerly Canvas) can escape isolation via MathLive’s virtual keyboard, enabling account takeovers. [Simon Willison]

datasette-llm 0.1a9 — Open-source plugin for Datasette Agent now inherits the default model from LLM, eliminating manual configuration. [Simon Willison]

Models & research

GLM-5.3-Flash — Open-weight MoE (320B total, 18B active) with 512K context, deployed on H200s for coding tasks. Users report strong performance when paired with GPT-6.1 Sol as an orchestrator, though cross-provider subagent coordination remains a gap. [Reddit r/LocalLLaMA]

Industry pulse

OpenAI’s free API credits for Pro subscribers—explicitly blocked for Codex—signal a deliberate push to segment usage. Developers chasing cost savings may find themselves herded toward non-code workloads, while Codex remains a premium upsell. The move mirrors Apple’s recent clampdown on agent data access: both are less about security than about controlling the economic stack.

Stat of the day

$6.3B — the record sum stolen from Binance, now attributed to North Korea by the FBI. The heist eclipses the 2022 Ronin Bridge attack ($625M) by an order of magnitude, underscoring how state actors leverage scale to outpace traditional tracking.

Get the full analysis — subscribe to Gradient Pro.