Skip to content
North Korean Hackers Execute $1.4 Billion Binance Heist

North Korean Hackers Execute $1.4 Billion Binance Heist

First seen 8 Nov 2026, 07:11 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 8, 2026 at 07:12 UTC
  • •North Korean hackers stole 18,270 bitcoins from Binance, worth $1.4 billion.
  • •The attack involved a sophisticated social engineering tactic using a fake job interview.
  • •Stablecoin issuers quickly froze over $2.6 billion in stolen assets, indicating a shift in crypto transaction control.

On October 29, 2026, a North Korean hacking group breached Binance, stealing approximately 18,270 bitcoins valued at $1.4 billion. The hackers spent five months planning the operation, which involved creating a fake company to conduct a job interview with a Binance employee. During the interview, malware was introduced, allowing access to Binance's internal network. The FBI has attributed the attack to North Korean hackers, raising concerns about the regime's potential use of stolen cryptocurrency to fund weapons development. Following the breach, stablecoin issuers like Tether and Circle froze over $2.6 billion in stolen assets, showcasing a shift in the cryptocurrency landscape towards transaction censorship. The incident highlights vulnerabilities in cryptocurrency exchanges and the evolving tactics of state-sponsored cybercriminals.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 9h ago How this analysis works

Timeline

2026-10-29
Binance hack discovered
North Korean hackers breached Binance, stealing approximately 18,270 bitcoins valued at $1.4 billion.
Asiae.Co.Kr
2026-10-29
Tether freezes stolen assets
Tether froze over $1.5 billion in stolen digital dollars within 30 minutes of the hack being discovered.
Telegraph
2026-10-29
Circle immobilizes stolen funds
Circle initially immobilized more than $800 million in stolen assets, later increasing that figure to over $1.1 billion.
Telegraph

More articles in this cluster (2)

Following this threat?

Track Lazarus Hacking Group and Binance in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (13)

1 / 2

Common questions

How did the hackers gain access to Binance?
The hackers created a fake company and conducted a job interview with a Binance employee, introducing malware during the process.
What measures were taken to recover stolen funds?
Tether and Circle froze over $2.6 billion in stolen assets shortly after the hack was discovered.
What are the implications of this hack for cryptocurrency security?
The incident highlights vulnerabilities in cryptocurrency exchanges and the potential for state-sponsored cybercrime to impact financial systems.