The FBI attributes the theft of over $6 billion in bitcoin, ethereum and stablecoins from Binance to North Korea's TraderTraitor group. TraderTraitor is also linked to a $1.5 billion Bybit hack last year. Binance says it will cover the losses, using funds to buy back about 90% of the stolen assets.
FBI Attributes $6 Billion Binance Crypto Theft to North Korean-Linked TraderTraitor Group
The theft itself took only minutes.
Start with the number. Why does $6 billion stand out?
It's believed to be the biggest crypto heist ever, and it happened in minutes. The Bybit hack last year was $1.5 billion, so this is roughly four times that.
And the FBI links the two?
Yes. It names TraderTraitor as the actor behind both, and says North Korea was responsible for this one.
Worth being clear about who is saying that. The attribution is the FBI's statement. The reporting doesn't describe the evidence behind it, and nothing here shows North Korea responding.
What is the FBI saying happens to the money now?
It says it has seen the actors converting assets mostly into ethereum, and it expects further laundering through DeFi and instant swap services. So it asked exchanges and analytics firms to block flagged addresses.
Note that's an expectation, not a confirmed outcome. We don't know how much has moved or how much could be frozen.
Binance says it will make customers whole.
It's spending over $6.34 billion of company funds to buy tokens covering about 90% of the loss. The other 10% is less liquid and may take longer.
That's Binance's own account, posted on X. And the piece mentions worries about AI weakening cryptography, but doesn't link that to this theft. How the attackers got in is still unknown.
The Pulse
- FBI says North Korea stole over $6 billion from Binance on or about Oct 29, 2026
- TraderTraitor also linked to $1.5 billion Bybit hack last year
- Binance using over $6.34 billion of its own funds to replace about 90% of losses
- Stolen assets include bitcoin, ethereum, tether and USD Coin
The FBI attributes the theft of over $6 billion in bitcoin, ethereum and stablecoins from Binance to North Korea's TraderTraitor group. TraderTraitor is also linked to a $1.5 billion Bybit hack last year. Binance says it will cover the losses, using funds to buy back about 90% of the stolen assets.
The FBI says North Korea's TraderTraitor group stole over $6 billion in virtual assets from Binance, which is replenishing about 90% of the losses from company funds.
On Saturday, the FBI put a name to the party behind what is believed to be the largest cryptocurrency heist in history: North Korea. In a statement, the agency said the Democratic People's Republic of Korea was responsible for stealing more than $6 billion (€5.36 billion) in virtual assets from Binance, on or about October 29, 2026.
The theft itself took only minutes. The stolen holdings included bitcoin, ethereum, and stablecoins such as tether and USD Coin, whose values are pegged to traditional currencies. When news of the attack broke on Friday, prices of most major cryptocurrencies slumped.
The FBI tied the theft to what it called "malicious cyber activity" by an entity known as TraderTraitor. That is the same group behind a $1.5 billion hack of the exchange Bybit last year. The agency said it had observed TraderTraitor actors converting the stolen assets, primarily into ethereum.
The bureau also laid out what it expects to happen next. The assets, it said, will likely be laundered further through decentralized finance (DeFi) platforms and instant swap services, as the actors prepare them for later stages of laundering. To get ahead of that, the FBI asked crypto exchanges, blockchain analytics companies, and others to block transactions linked to a set of flagged addresses, so the money cannot be cleaned and its origins hidden.
Binance is the world's largest crypto exchange by daily trading volume, and it responded on Saturday. The company said it was using its own funds, worth more than $6.34 billion, to buy tokens and replenish about 90% of the stolen assets. The remaining 10% consisted of less liquid tokens, which the company said may take longer to buy back.
In a post on X, Binance said its commitment remained the same: it will fully cover the financial impact of the funds stolen in the incident.
The heist arrived amid growing worry that the expanding capabilities of artificial intelligence models could undermine cryptography and IT security protocols. The source does not say whether AI played any role in this attack.
Two things are worth watching. One is whether exchanges and analytics firms block the addresses the FBI flagged before the laundering advances. The other is whether Binance completes the buyback of the less liquid 10% of the stolen tokens.
Notable Quotes
Binance will fully cover the financial impact of the funds stolen in this incident.— Binance, in a post on X
North Korea was responsible for the theft of more than $6 billion in virtual assets from Binance.— FBI statement