Skip to content
Binance Suffers $6.34 Billion Security Incident Attributed to North Korea

Binance Suffers $6.34 Billion Security Incident Attributed to North Korea

First seen 3 Nov 2026, 15:45 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 3, 2026 at 18:16 UTC
  • •Binance lost approximately $6.34 billion in a security incident on October 29, 2026.
  • •The breach was attributed to North Korean state-sponsored actors by the FBI.
  • •Binance has frozen $2.85 billion in stolen assets and will cover user losses.

On 29 October 2026, Binance experienced a significant security breach resulting in the theft of approximately USD 6.34 billion in digital assets. The attack exploited unauthorized access to an internal wallet signing service, allowing the attacker to initiate transactions outside the normal withdrawal process. Affected assets included XRP, SOL, OP, and BTC, with 98% of impacted token assets replenished by 31 October. Binance has frozen or intercepted about USD 2.85 billion in stolen assets and is taking steps to enhance security measures, including closing entry points used in the attack. The FBI has indicated that the Democratic People’s Republic of Korea is responsible for the incident. Binance will absorb the financial impact, ensuring users will not incur losses. The investigation is ongoing, with independent security firms engaged for further review.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-29
Binance security incident occurs
Unauthorized access to an internal wallet signing service led to the theft of $6.34 billion in digital assets.
X
2026-10-31
98% of impacted assets replenished
Binance reported that 98% of the affected token assets have been replenished and are verifiable on their Proof of Reserves page.
X
2026-11-01
Withdrawals for selected assets reopen
Binance began reopening withdrawals for selected networks and assets after initial security checks.
X
2026-11-03
Further withdrawals reopening announced
Binance announced the reopening of withdrawals for additional assets, continuing to strengthen safeguards.
X

More articles in this cluster (4)

Following this threat?

Track Binance in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (11)

1 / 4

Common questions

What assets were affected?
The incident impacted XRP, SOL, OP, and BTC, with a total loss of approximately $6.34 billion.
How is Binance handling the losses?
Binance has committed to absorbing the financial impact, ensuring that users will not incur any losses.
What security measures are being implemented?
Binance is enhancing security by closing entry points used in the attack and implementing tighter device controls and AI-based anomaly detection.