The FBI said on Saturday, 31 October 2026, that North Korea was responsible for the theft of more than $6 billion in virtual assets from Binance on or about 29 October. The bureau calls the activity “TraderTraitor,” the same name it gave to the roughly $1.5 billion Bybit theft of February 2025.
According to the FBI, those behind the attack converted most of the stolen assets into ether and are expected to launder them further through DeFi and instant swap services. It published more than 600 linked digital addresses and asked virtual asset businesses to block transactions connected to them.
Binance said on Saturday it had replaced 90% of the stolen amount by buying tokens with company funds, adding: “Binance will absorb the financial impact of these stolen funds, not our users.” It reopened withdrawals in stages on Sunday, starting with bitcoin, then Ethereum and BNB Smart Chain. That 90% is restored backing, CNBC noted, not money recovered from the attacker.
