FBI says North Korea responsible for $6bn crypto hack
The FBI said Saturday that North Korea was behind the theft of more than $6 billion in virtual assets from the cryptocurrency exchange Binance. "The Democratic People's Republic of Korea (North Korea) was responsible for the theft of more than $6 billion USD in virtual assets from cryptocurrency exchange Binance, on or about October 29, 2026," the US law enforcement agency said in a statement.
- World
- DPA
- Published Date: 10:11 AM 01 November 2026
The FBI said North Korea is responsible for a cyberattack involving an estimated $6.3 billion in digital assets from cryptocurrency exchange, Binance.
The FBI attributed the attack to North Korean hackers belonging to the TraderTraitor group.
Blockchain analysis firm TRM Labs had earlier linked the attack to the same group. According to TRM, the attackers moved most of the $6.3 billion within 20 minutes, apparently in an attempt to prevent the assets from being frozen.
The FBI said it had "observed TraderTraitor actors converting stolen assets" primarily into Ethereum.
"It is expected these assets will then be further laundered by converting them using DeFi and instant swap services as they prepare them for further laundering stages," the FBI said in a statement.
Binance said on X it had so far covered about 90% of the assets stolen in the attack. The remaining 10% consisted of tokens that were less liquid, meaning they may take longer to buy back, the company said.
"Binance will absorb the financial impact of these stolen funds, not our users."
The cyberattack is believed to be the largest theft from a cryptocurrency exchange to date.
The stolen assets included Bitcoin, Ethereum and stablecoins such as Tether and USD Coin, whose values are pegged to traditional currencies.
The FBI attributed the attack to North Korean hackers belonging to the TraderTraitor group.
Blockchain analysis firm TRM Labs had earlier linked the attack to the same group. According to TRM, the attackers moved most of the $6.3 billion within 20 minutes, apparently in an attempt to prevent the assets from being frozen.
The FBI said it had "observed TraderTraitor actors converting stolen assets" primarily into Ethereum.
"It is expected these assets will then be further laundered by converting them using DeFi and instant swap services as they prepare them for further laundering stages," the FBI said in a statement.
Binance said on X it had so far covered about 90% of the assets stolen in the attack. The remaining 10% consisted of tokens that were less liquid, meaning they may take longer to buy back, the company said.
"Binance will absorb the financial impact of these stolen funds, not our users."
The cyberattack is believed to be the largest theft from a cryptocurrency exchange to date.
The stolen assets included Bitcoin, Ethereum and stablecoins such as Tether and USD Coin, whose values are pegged to traditional currencies.
OTHER WORLD NEWS
- ‘People are dying in so many ways’: Tent fire kills 2 infant girls in Gaza
- President Bukele defends Salvadoran forces in Haiti against allegations of criminal acts
- Trump says Flavio Bolsonaro can stay in US 'as long as he wants'
- Flavio Bolsonaro accompanied by former Mossad agent while fleeing Brazil