North Korea’s government stole more than $6 billion in cryptocurrency from Binance in a single attack, the Federal Bureau of Investigation (FBI) says, making it the largest crypto heist ever recorded.
Story Snapshot
- The FBI says North Korea was behind the theft of over $6 billion from Binance on or about October 29, 2026.
- The agency links the attack to a North Korean hacking group it calls TraderTraitor.
- Blockchain analysts at TRM Labs had already flagged North Korea’s involvement before the FBI’s public statement.
- Binance, the world’s largest crypto exchange, paused withdrawals and later resumed them after the breach.
The FBI Names North Korea In An Unusually Direct Public Statement
The FBI rarely names a foreign government this fast after a cyberattack. Yet on October 31, 2026, the bureau released a cyber alert stating plainly that North Korea stole more than $6 billion in virtual assets from Binance. The statement came just two days after the theft happened, a quick turnaround that shows how seriously federal investigators treat threats to the global crypto market.
The FBI identified the hacking operation as TraderTraitor, a group tied to North Korea’s state cyber apparatus. Federal investigators said they were working alongside industry partners to trace the stolen funds and understand how the attackers pulled off the breach. Binance, headquartered to serve millions of traders worldwide, called it a security incident with an estimated $6 billion financial impact.
Blockchain Sleuths Spotted The North Korean Fingerprints First
Before the FBI went public, private blockchain intelligence firms had already connected the dots. TRM Labs, a U.S.-based blockchain analytics company, attributed the attack to TraderTraitor within days of the theft, tracking the stolen funds as they moved across the blockchain. Analysts noted the hack bore the hallmarks of past North Korean operations, from the speed of the laundering to the specific wallet patterns used.
South Korea’s Yonhap News Agency reported the stolen total at roughly $6.36 billion, calling it the biggest cryptocurrency theft on record. The FBI’s confirmation gave government weight to what private researchers had already concluded, closing the gap between early private attribution and official U.S. government findings. Binance later said it resumed withdrawals for customers affected by the breach.
This Heist Fits A Long, Documented Pattern Of North Korean Crypto Theft
North Korea has targeted cryptocurrency exchanges since 2017, turning digital theft into a steady source of foreign cash for a government cut off from normal banking. United Nations sanctions monitors have tracked dozens of suspected attacks tied to Pyongyang, worth billions of dollars, feeding funds toward the regime’s weapons programs. The Binance theft stands out for its size, but not for its method.
United Nations experts previously documented North Korean cyber actors stealing more than $50 million from several exchanges across North America, Europe, and Asia in just over a year. Investigators have also traced hundreds of millions in laundered crypto through mixing services designed to hide where stolen money ends up. The Binance case now ranks as the largest single entry in that long-running ledger.
FBI blames North Korea for $6 billion Binance hack, urges THORChain to block stolen funds https://t.co/qpa5RB1XNN
— DR.Moore ᚠᚹᛃ (@BatchukaO) November 2, 2026
For everyday Americans watching their retirement accounts and savings tied to a financial system increasingly linked to digital assets, this theft is a warning shot. A hostile government using stolen crypto to fund weapons programs is not an abstract policy debate. It is a direct threat that regulators, exchanges, and lawmakers must treat with the urgency it deserves, rather than letting it fade into another crypto-world headline.
Sources:
foxbusiness.com, abcnews.com, dw.com, fbi.gov, en.yna.co.kr, cbsnews.com, securityweek.com, rte.ie
