geopolitics

FBI Blames North Korean Hackers for $6 Billion Binance Heist

The FBI links the October 29 Binance hack to North Korea's TraderTraitor group, while Binance says it has covered about 95% of the reserve shortfall.

the same feed is available to bots and dashboards through the api. connect the api →

what happened

The FBI says the Binance crypto exchange attack was carried out by TraderTraitor, a unit of the North Korean Lazarus Group. According to the agency, more than $6 billion in digital assets were withdrawn from the platform on October 29. The FBI published over 600 Ethereum addresses, 19 Bitcoin wallets and one Solana address tied to the stolen funds, and asked market participants to block transfers from them. The measures aim to stop money laundering rather than freeze coins at the blockchain level.

Chainalysis linked the attack to the same group on October 30 and noted that the proceeds were mixed with assets stolen from Bitget in September. The firm estimates unauthorized transfers from Binance hot wallets at about $6.4 billion. Binance said that by November 1 it had covered roughly 95% of the shortfall, and that client funds in major coins are fully backed by reserves. Withdrawals will resume in phases, starting November 1 from 6:00 to 9:00 UTC.

why it matters

Two points matter for the market: the scale of the theft is comparable to the largest hacks in the industry's history, and restoring reserves does not mean the stolen funds have come back. Binance reported freezing about $3 billion, but according to Chainalysis, part of the money keeps moving through many new addresses. The incident sharpens questions about trust in large exchanges and how quickly laundering can be stopped.

market impact

Crypto: the hit to trust in large exchanges weighs on sentiment for BTC and ETH

tags

instruments

BitcoinEthereumBNBSolanaTron

sources

  1. FBI Accuses North Korean Hackers of $6 Billion Binance Breach — fbi.gov, 1 November 2026 at 08:13 UTC

prepared by the newsmetry newsroom with ai assistance from the sources listed below. not investment advice.

alerts on your topics, the morning digest and the api — in your account.

get stories in real time ↗