FBI Confirms North Korea Behind $6.3 Billion Binance Hack
The FBI says North Korea’s TraderTraitor group stole $6.3B from Binance in the biggest crypto heist ever. Here’s what happened and what’s next.
The FBI has officially blamed North Korea for the Binance hack, saying the theft of billions in minutes was orchestrated by North Korean hackers. The bureau said Saturday that the attack was tied to an entity known as TraderTraitor, the same actors behind last year’s $1.5 billion Bybit hack. It is the largest crypto heist on record.
What Happened in the Binance Hack?
The theft took place on October 29, 2026. Reports say the attackers hit Binance wallets across 10 blockchains and drained the funds in about 20 minutes. Blockchain analytics firm TRM said the attackers were able to order Binance wallets to empty into wallets they controlled, mirroring the 2025 Bybit heist.
How the FBI Reached Its Conclusion
TRM linked the attack to North Korea before the FBI spoke. TRM said several features of the attack match earlier North Korea-linked heists, including Bybit. The FBI’s attribution came a day or two later and turned suspicion into an official finding. Its statement is also operational. The bureau asked exchanges, blockchain analytics companies and others to block transactions tied to listed addresses so the money can’t be laundered. The FBI said it is working with the US Secret Service and IRS Criminal Investigation.
Who Is TraderTraitor?
TraderTraitor is a North Korean state-linked hacking operation. Experts describe it as a sophisticated unit within the North Korean military with a track record of cyber heists. The FBI named the same group for the February 2025 Bybit theft, which makes Binance the second record-setting attack it has tied to them in under two years.
Where Is the Stolen Money Going?
The FBI says TraderTraitor is converting stolen assets primarily into Ethereum (ETH) and expects the group to use DeFi platforms and instant swap services next. Converting to ETH and moving through swap services is a typical laundering path, which is why the FBI is pushing exchanges to block flagged addresses quickly. Our earlier report cited figures of about billion frozen by token issuers and security teams, though that figure has not been widely confirmed.
Will Binance Users Get Their Money Back?
Binance says yes. The company said it holds enough of the stolen currency in reserve to cover 90 percent of the missing assets and promised customers will be fully reimbursed. One caveat: NPR notes Binance is not necessarily bound to repay under current regulations, and critics worry smaller exchanges couldn’t do the same after a hack.
What This Means for Crypto Security
The Binance hack shows that even the world’s largest exchange can be drained in minutes. For everyday users:
- Don’t keep more on exchanges than you’re willing to risk.
- Use hardware wallets for long-term holdings.
- Watch official channels for withdrawal or reimbursement updates, and ignore DMs claiming to offer “recovery.”
Regulators will likely scrutinize exchange custody and key-management practices.
This article is for information only and is not financial advice. We will update it as the investigation develops.
Who did the FBI blame for the Binance hack?
North Korea, specifically the TraderTraitor group.
How much was stolen?
About $6.3 billion, according to most reports. Some outlets cite slightly different figures.
Is this the biggest crypto hack ever?
Yes. It exceeds the $1.5 billion Bybit hack of 2025.
Are Binance users’ funds safe?
Binance says customers will be fully reimbursed. Check its official channels for updates.
Sources
- Associated Press: FBI blames North Korea for stolen billions from Binance
- ABC News (Australia): FBI blames North Korea for the Binance crypto hack
- U.S. News & World Report
- NPR: Binance crypto heist
- South China Morning Post: FBI blames North Korea for stolen billions from Binance
- Decrypt: TRM and Chainalysis tie the Binance hack to TraderTraitor
