FBI Confirms North Korea Behind $6.3 Billion Binance Hack, Links Attack to TraderTraitor
The U.S. Federal Bureau of Investigation (FBI) has officially attributed the theft of more than $6 billion in cryptocurrency from Binance to North Korea, identifying the cyber operation as TraderTraitor. The attack, which occurred on or around October 29, 2026, resulted in approximately $6.3 billion in stolen digital assets, making it one of the largest cryptocurrency thefts ever reported.
According to information shared by Coin Bureau, the FBI identified the same North Korean hacking group previously associated with the $1.5 billion security breach at cryptocurrency exchange Bybit. The latest attribution establishes a connection between two major cryptocurrency thefts and places renewed attention on North Korea-linked cyber operations targeting digital asset platforms.
FBI Identifies TraderTraitor as Responsible for Binance Attack
In an official cybersecurity advisory, the FBI stated that the Democratic People's Republic of Korea (DPRK) was responsible for stealing more than $6 billion in virtual assets from Binance on or around October 29, 2026. The agency specifically refers to the malicious cyber activity as TraderTraitor.
The FBI's identification of TraderTraitor is particularly significant because the group has also been linked to the $1.5 billion Bybit hack. The Binance incident represents another major cryptocurrency theft attributed to North Korean hackers, reinforcing concerns about the security of centralized cryptocurrency platforms and the movement of stolen digital assets across blockchain networks.
Following the attack, the FBI urged cryptocurrency exchanges, decentralized finance (DeFi) platforms and other virtual asset service providers to take action against the hackers' wallet addresses. The agency is calling on relevant industry participants to block transactions associated with addresses used by TraderTraitor to move and launder the stolen funds.
Binance Says It Has Replenished 90% of Stolen Assets
Meanwhile, Binance has moved to address the financial consequences of the incident, assuring customers that they will not be responsible for the stolen funds. The exchange reported that it had already replenished approximately 90% of the losses using its available financial resources.
The remaining 10% is still being addressed as Binance works to restore the affected assets. The company's commitment to covering the full financial impact is intended to ensure that customer balances are not reduced as a result of the security breach.
Binance has also indicated that withdrawals are expected to reopen on Sunday, November 1, 2026, following their suspension after the attack. The restoration of withdrawal services is an important operational step as the exchange works to stabilize its platform and address concerns surrounding the incident.
Crypto Industry Faces Renewed Security Concerns
The Binance incident has drawn attention to the risks associated with large-scale cryptocurrency thefts, particularly when attackers attempt to move substantial amounts of digital assets across multiple services. The FBI's warning places responsibility on exchanges and DeFi service providers to identify and prevent transactions connected to the suspected hackers.
With more than $6 billion stolen from Binance and the same TraderTraitor group previously linked to Bybit's $1.5 billion loss, the FBI's announcement marks a significant development in the investigation. Binance, meanwhile, maintains that customers will not bear the financial impact and says it has already covered 90% of the stolen assets ahead of its planned withdrawal reopening on Sunday.
Writer: Victoria HaleTechnology & Blockchain WriterVictoria Hale writes about blockchain technology, digital infrastructure, and the intersection of emerging technologies with finance. Her articles explore how new protocols and systems are shaping the evolving digital economy.She prioritises clarity and accuracy when explaining technical developments to a general audience.
Check out other news and articles on Google News
Disclaimer:
The articles on Hokanews are here to keep you updated on the latest buzz in crypto, tech, and beyond—but they’re not financial advice. We’re sharing info, trends, and insights, not telling you to buy, sell, or invest. Always do your own homework before making any money moves.
Hokanews isn’t responsible for any losses, gains, or chaos that might happen if you act on what you read here. Investment decisions should come from your own research—and, ideally, guidance from a qualified financial advisor. Remember: crypto and tech move fast, info changes in a blink, and while we aim for accuracy, we can’t promise it’s 100% complete or up-to-date.