FBI attributes $6.3 billion Binance crypto theft to North Korea

FBI attributes the Binance heist to North Korea

The FBI has publicly attributed an enormous theft of cryptocurrency from Binance to North Korea. According to The Verge, the breach took place on October 29, 2026, and the bureau is calling the operation TraderTraitor, the label it uses for this specific North Korean cyber campaign.

The attribution came in a formal FBI statement, which says North Korea was responsible for the theft of more than $6 billion in virtual assets from the exchange. The Verge reports the loss at $6.3 billion, while the bureau's own statement goes only as far as saying the amount exceeded $6 billion without giving a precise figure.

Stolen funds are already moving

According to the FBI, which worked on the case with the US Secret Service and IRS Criminal Investigation, the TraderTraitor actors have been observed converting the stolen assets primarily into Ethereum. The agency expects those assets to then be laundered through decentralized finance services and instant swap platforms, with additional laundering stages anticipated as the operation proceeds.

What the statement does not contain is nearly as notable. As The Verge points out, the agency offered few other details or evidence. There is no public explanation of how the attackers compromised Binance, how the theft was carried out, how many customers were affected, or what specific intelligence ties the actors to North Korea.

Binance reopens withdrawals

Binance froze customer withdrawals immediately after the breach. According to The Verge, the exchange reopened them on November 1, roughly three days after the theft, restoring a degree of normalcy for customers even though the stolen assets remain unaccounted for.

Why it matters

The scale alone puts this incident in rare territory. A loss of more than $6 billion would stand out even among the largest crypto exchange breaches on record, and the FBI's decision to attribute it to a nation-state rather than conventional criminals changes both the recovery outlook and the political stakes. Funds taken in state-directed operations are seldom returned, and once they are cycled through swap services and DeFi protocols, tracing them becomes considerably harder.

The timing of the disclosure also carries weight. By revealing that the assets are being converted into Ethereum and routed toward DeFi and instant swap services, the FBI has effectively alerted the rest of the industry to where the funds are likely to surface next, giving compliant platforms a window to watch for and slow the laundering, even though the statement itself offers little evidence to work from.

For Binance, the hardest questions remain unanswered. Withdrawals have resumed, but neither the exchange nor the bureau has publicly described how one of the world's largest crypto platforms was drained of billions of dollars in a single incident. How those questions are resolved will shape how regulators, institutional clients and everyday users judge the security of centralized exchanges going forward.