On Saturday, the ninth of Aban, U.S. federal police, together with the Secret Service and the criminal investigations department of the tax authority, announced that they have information linking the theft of cryptocurrency from the Binance exchange to North Korea. The three agencies named the group “TraderTraitor,” a subsidiary of Lazarus, as the perpetrator.

The theft began on Thursday, the seventh of Aban, and within a few hours emptied Binance’s hot wallets onto 11 blockchains.

Blockchain analytics firm Elliptic estimated the figure at $6.43 billion, while Binance says the damage is close to $6.3 billion.

According to Elliptic’s estimate, $3.46 billion worth of the cryptocurrencies were stablecoins, $3.8 billion on the Ethereum network across 186 tokens, and 18,270 bitcoins worth about $1.48 billion.