FBI Blames North Korea for $6.3B Binance Crypto Heist

The FBI has officially blamed North Korea for the theft of more than $6 billion in cryptocurrency from Binance, the world's largest crypto exchange, making it the biggest digital heist in history. In an alert issued on 31 October 2026, the bureau said a state-sponsored hacking unit known as TraderTraitor converted the stolen bitcoin into Ethereum (ETH) and may be preparing further money-laundering phases to erase traces.

What happened at Binance?

On 29 October 2026, attackers drained an estimated $6.3–6.4 billion in digital assets from Binance's hot wallets across at least ten blockchains, according to blockchain intelligence firm TRM Labs. The haul included about 18,270 Bitcoin (BTC) worth roughly $1.47 billion, plus Ethereum, Tron, XRP, Solana and stablecoins. The largest cryptocurrency exchange hack surpassed the previous record — the $1.5 billion ByBit theft in early 2025 — by a factor of four.

Who is TraderTraitor?

TraderTraitor is the FBI's name for North Korean state-sponsored cyber activity linked to the Lazarus Group, also tracked as APT38, Jade Sleet and UNC4899. The group moves fast and spreads stolen funds across thousands of addresses to make them harder to trace. U.S. authorities say Pyongyang uses these operations to fund its weapons programs and evade sanctions. The same group was blamed for the ByBit hack last year, which at the time was the largest crypto theft on record.

How did the $6.3 billion hack unfold?

Binance said the breach started with a compromised software engineer's laptop, allowing attackers to approve unauthorized withdrawals. TRM Labs estimates the operation took about 36 hours to prepare and only minutes to execute, using a 'peel chain' technique to obfuscate the flow of XRP, BTC, USDT and TRX. The FBI observed TraderTraitor converting the stolen assets primarily into Ethereum, and it warned that further laundering through decentralized finance platforms and instant swap services is likely.

Binance compensation and user impact

Binance, the world's largest crypto platform by daily trading volume, says it has already covered 90% of the stolen crypto using its own funds and intends to compensate the remaining 10%. "Users will suffer no financial damage from this incident," said co-owner Richard Teng in a statement. The exchange used part of its $1 billion Secure Asset Fund, Futures Insurance Fund and corporate treasury to cover losses. This response echoes the exchange security and reimbursement practices seen after earlier breaches.

Market impact and trust

News of the record hack triggered sharp declines in crypto prices, although bitcoin's drop was limited to a few percentage points and Ethereum and BNB fell more steeply. The crypto market volatility has raised fresh questions about exchange security. In the Netherlands, few traders are expected to be directly affected because Binance withdrew from the Dutch market in 2023 after failing to obtain a licence from the central bank, DNB.

FAQ

Was North Korea really behind the Binance hack?

Yes. The FBI, working with the U.S. Secret Service and IRS Criminal Investigation, publicly attributed the theft to North Korea's TraderTraitor group on 31 October 2026.

How much was stolen from Binance?

About $6.3–6.4 billion in digital assets, making it the largest cryptocurrency heist ever recorded.

Will Binance users lose money?

Binance says users will suffer no financial damage. The exchange has already replaced 90% of the stolen crypto and says it will cover the rest.

What is TraderTraitor?

TraderTraitor is the FBI's designation for North Korean malicious cyber activity tied to the Lazarus Group, known for stealing crypto to fund the regime.

How did the hackers steal the funds?

Binance traced the breach to a compromised engineer's laptop that allowed unauthorized withdrawal approvals, followed by rapid conversion of stolen assets into Ethereum.