The FBI on October 31, 2026, accused North Korea’s state-backed group TraderTraitor of stealing $6.3 billion from Binance in the largest cryptocurrency heist ever, according to the bureau’s statement and four other reports. Binance confirmed it had already replaced 90 percent of the stolen funds using its reserves.
FBI blames North Korea for $6.3 billion Binance hack: the biggest crypto theft in history
5 billion Bybit attack in February 2025. The FBI stated that stolen assets were converted into ethereum and that further laundering was expected through decentralized finance (DeFi) and instant swap services.
What happened
The FBI on October 31, 2026, formally attributed the $6.3 billion crypto heist from Binance to North Korea’s elite hacking unit, TraderTraitor, the same group behind a $1.5 billion Bybit attack in February 2025. The FBI stated that stolen assets were converted into ethereum and that further laundering was expected through decentralized finance (DeFi) and instant swap services. Binance suspended withdrawals immediately after the attack but resumed them on November 1, 2026, after replenishing 90 percent of the stolen funds.
Who is affected
Crypto markets globally experienced volatility after the hack, with prices for major tokens like bitcoin and ethereum dropping on October 30, 2026. Smaller exchanges and blockchain analytics firms are now being urged by the FBI to block transactions tied to TraderTraitor’s addresses to prevent laundering.
Key numbers
| Stat | Figure | Date | Source |
|---|---|---|---|
| $6.3 billion | $6.3 billion | October 29, 2026 | CBC News |
| 90 percent | 90 percent | October 31, 2026 | CBC News |
| $1.5 billion | $1.5 billion | February 2025 | CBC News |
What to do next
Binance customers do not need to take action—the exchange has already covered 90 percent of the stolen funds and plans to cover the remaining 10 percent. The FBI has asked crypto exchanges and blockchain firms to block transactions linked to TraderTraitor’s addresses to prevent laundering. Users should monitor Binance’s official channels for updates on withdrawals and asset verification.
What we know and don’t know
The FBI has confirmed North Korea’s involvement and provided details on how stolen funds were converted into ethereum. However, the exact timeline of laundering efforts and the full extent of TraderTraitor’s infrastructure remain unclear. It is also unknown whether other exchanges or financial institutions have been compromised in this attack.
Timeline
- October 29, 2026: $6.3 billion stolen from Binance in a hack attributed to North Korea’s TraderTraitor group.
- October 30, 2026: Binance suspends withdrawals and confirms a "complex attack" involving a compromised laptop and malware designed to delete evidence.
- October 31, 2026: FBI formally blames North Korea for the hack and urges crypto firms to block related transactions. Binance announces 90 percent of stolen funds have been replenished.
- November 1, 2026: Binance resumes withdrawals and confirms full reimbursement for customers.
Why it matters
This hack underscores North Korea’s growing sophistication in cybercrime, with TraderTraitor now linked to two of the largest crypto heists in history. The incident raises concerns about the stability of global crypto markets and the effectiveness of existing security measures. It also highlights the challenges of tracking and recovering stolen funds in decentralized financial systems.
Frequently asked questions
Will Binance customers lose money?
No.
How did the hackers move the stolen funds?
The FBI stated that TraderTraitor converted stolen assets into ethereum and expects further laundering through decentralized finance (DeFi) and instant swap services.
Is this the largest crypto heist ever?
Yes. The FBI and multiple reports confirm this is the biggest crypto theft in history, surpassing previous attacks like the $1.5 billion Bybit hack in 2025.
Can I track the stolen funds?
The FBI and blockchain analytics firms like TRM Labs are monitoring transactions linked to TraderTraitor’s addresses, but the process is complex due to the use of DeFi and instant swaps.
Will Binance’s proof-of-reserves process be affected?
Binance has already taken a new snapshot of assets as of 00:00 GMT on October 31, 2026, ensuring users can verify their holdings remain backed at a 1:1 ratio for the listed tokens.
See what America is searching today →
Sources
- FBI blames North Korea for stolen billions from Binance in biggest hack in history — newsday.com, 2026-10-31
- Binance says billions replaced from hack that FBI blames on North Korea — cbc.ca, 2026-10-31
- FBI says North Korea stole $6 billion crypto from Binance in biggest hack ever — indiatoday.in, 2026-11-01
- FBI blames North Korea for stolen billions from Binance — katherinetimes.com.au, 2026-11-01
- FBI blames North Korea for US$6 billion Binance crypto hack — straitstimes.com, 2026-11-01
- FBI says North Korea was behind the $6.3 billion Binance crypto hack — nbcnews.com, 2026-10-31