Binance published an incident report attributing its October 29 theft of roughly $6.34 billion in crypto to North Korean state-linked hackers tracked as TraderTraitor/Lazarus Group. The exchange says an engineer was lured via a fake recruiter on a legitimate job platform, underwent staged interviews, and was tricked into downloading a malicious coding assignment that installed custom malware, eventually compromising Binance's wallet infrastructure. The FBI has also attributed the attack to the same North Korean group.
bleepingcomputer.com
· 2026-11-03
Kim Yo-jong, North Korea's General Affairs Department director and sister of Kim Jong Un, denied that Pyongyang was behind the $6.3bn theft from crypto exchange Binance, calling the accusation a US provocation. The FBI, Secret Service and cyber analysts have attributed the hack, the largest on record, to the state-linked group TraderTraitor, also known as Lazarus Group.
bbc.co.uk
· 2026-11-03
Binance disclosed that attackers, identified by the FBI as North Korea's TraderTraitor group, compromised a developer's laptop to access an internal service container capable of initiating withdrawal requests. The attackers then exploited further weaknesses and an Ethereum account-delegation mechanism to gain transaction approval authority over a hot wallet, draining billions in assets within about 20 minutes. Binance says there is no evidence leaked wallet keys were used, and that the breach involved multiple points of compromise beyond the initial device.
darkreading.com
· 2026-11-02
Binance, the world's largest crypto exchange, suffered what appears to be the largest crypto theft ever, with hackers making off with $6.3 billion in digital assets. Since withdrawals reopened, users have pulled a net $3.64 billion from the platform, though Binance says this represents only 2.1% of its total managed assets and that activity has since stabilized. The FBI has attributed the breach to North Korea's TraderTraitor hacking unit, and Binance says it has already replaced 90% of the stolen funds while pledging to cover all losses.
entrepreneur.com
· 2026-11-02
Binance has resumed customer withdrawals after suffering what is being described as the biggest hack in cryptocurrency history. The exchange had paused the function while it investigated and responded to the breach.
wsj.com
· 2026-11-02
Binance customers pulled a net $3.64bn from the exchange on Sunday as trading resumed following a suspension triggered by what is thought to be the largest crypto hack ever, affecting $6.3bn in assets. The FBI and other bodies have blamed North Korea for the breach, and Binance says it has covered about 95% of the stolen funds while vowing to cover the rest.
bbc.co.uk
· 2026-11-02
Binance reopened withdrawals in phases starting Sunday after a $6.3 billion security breach, and reported $4.65 billion in withdrawals against $1.01 billion in deposits, resulting in $3.64 billion in net outflows. The exchange said this represented about 2.1% of its roughly $171 billion in total assets and that withdrawal volumes were stabilizing after an initial spike. Founder Changpeng Zhao said '98% choose to stay,' noting most outflows occurred within the first couple hours of withdrawals resuming.
news.slashdot.org
· 2026-11-02
Binance said it has begun resuming withdrawals in phases by network and asset type after freezing all deposits and withdrawals following a $6.3 billion theft from its wallets. The exchange said it has now covered 95% of the stolen funds and is still sourcing less liquid assets to cover the rest, pledging to absorb all losses itself rather than pass them to users. The FBI has attributed the breach to the North Korean hacking group TraderTraitor.
techcrunch.com
· 2026-11-01
The FBI has officially attributed the October 29 theft of roughly $6.3 billion in cryptocurrency from Binance to TraderTraitor, a North Korean state-sponsored hacking group also known as Lazarus Group, Jade Sleet, and APT38. The attack, previously tied by Binance to a compromised DevOps engineer's laptop, moved stolen funds across ten blockchains within about 20 minutes, and authorities have released 628 associated wallet addresses while urging exchanges to block related transactions.
bleepingcomputer.com
· 2026-11-01
The FBI attributed a theft of more than $6 billion in virtual assets from Binance around October 29, 2026 to North Korean hackers, naming the operation 'TraderTraitor.' Working with the Secret Service and IRS Criminal Investigation, the FBI said the stolen funds are being converted primarily into Ethereum ahead of further laundering through DeFi platforms and instant swap services.
theverge.com
· 2026-11-01
Following the October 30 breach of Binance, Circle froze about $823 million in USDC tied to the stolen funds, while Tether CEO Paolo Ardoino said Tether froze over 1.567 billion USDT linked to the attack, though some reports cite a lower figure of $975.1 million. Combined with other blockchain partners' freezes, roughly $2.4 billion was immobilized, separate from the approximately $3 billion Binance says is frozen on-chain across multiple assets.
techreport.com
· 2026-11-01
Binance reported it has replenished roughly 90% of the $6.3 billion lost in a security breach and committed to covering the remaining losses in full. The exchange said normal operations are expected to resume on Sunday.
news.slashdot.org
· 2026-11-01