Channelnewsasia North Korean Hackers Steal $6.3 Billion from Binance in Record Cyber Heist
Article Content
- •Binance lost $6.3 billion in a cyberattack attributed to North Korean hackers.
- •The FBI confirmed the involvement of the TraderTraitor hacking group in the breach.
- •Binance has replenished 95% of stolen assets and resumed withdrawals in phases.
On October 29, 2026, Binance, the world's largest cryptocurrency exchange, suffered a massive cyberattack attributed to North Korean hackers known as TraderTraitor, resulting in the theft of approximately $6.3 billion in digital assets. The attackers exploited vulnerabilities in Binance's hot wallet system, allowing unauthorized withdrawals across multiple blockchains. The FBI confirmed the involvement of TraderTraitor, a group linked to previous high-profile hacks, including the $1.5 billion Bybit theft. Binance reported that it has replenished 95% of the stolen assets using its own funds, including its Secure Asset Fund for Users (SAFU). As of November 1, 2026, Binance began restoring withdrawals in phases, with a significant spike in customer withdrawals observed. Approximately $3 billion of the stolen assets have been frozen through cooperation with law enforcement and industry partners. The incident has raised concerns about the security of centralized exchanges and the ongoing threat of state-sponsored cybercrime.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (114)
Following this threat?
Track APT38, TraderTraitor and Binance in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What measures is Binance taking to secure user funds?
How much of the stolen funds has Binance recovered?
Is the TraderTraitor group known for other attacks?
Continue Reading
Record $6.3 Billion Hack of Binance Attributed to North Korean Hackers On October 29, 2026, Binance, the world's largest cryptocurrency exchange, suffered a massive cyberattack resulting in the theft of approximately $6.3 billion in digital assets. The breach was reportedly executed through a compromised laptop belonging to a DevOps engineer, allowing attackers to gain unauthorized… 
Poland Wiper Attacks Utilize Obfuscated Files and Deobfuscation Techniques In the 2025 Poland Wiper Attacks, adversaries employed obfuscated files to conceal malware artifacts, specifically using Base64-encoded ZIP archives to evade detection. The attacks affected various systems, leveraging techniques like encrypted payloads and user execution. Tools such as certutil were utilized for…