Binance Hack: FBI Blames North Korea for $6.3B Heist

The Binance hack is now officially the biggest crypto heist ever recorded, and the FBI has named the crew it blames. Binance, the world's largest exchange, said roughly six point three billion dollars in assets were affected after attackers drained its wallets on October 29.

What Actually Happened

According to CNBC, more than six billion dollars in crypto was stolen from Binance, with blockchain intelligence firms linking the attack to North Korea's TraderTraitor group. Chainalysis wrote that funds began leaving Binance hot wallets around four twenty in the afternoon Eastern time on October 29, across multiple blockchains.

TRM Labs said an attacker moved about six point three six billion dollars out of Binance wallets on ten blockchains, most of it in around twenty minutes. That makes the Binance hack roughly four times bigger than the one point five billion dollar Bybit theft from last year, as BleepingComputer reported.

A Laptop Was the Way In

Binance said its early investigation pointed to a compromised DevOps engineer's laptop, which may have let the attacker reach a service container and submit unauthorized withdrawals. Co-CEO Richard Teng pushed back on the idea that it was simple, saying the attacker did not just use one engineer's permissions and that it was not a single one-click action.

Teng also said the attackers used a self-destruct mechanism that wiped tooling and traces as they went, which makes the investigation harder, according to Axios. Binance later said it had found additional points of breach beyond the laptop.

One security chief quoted by Cointelegraph described it as a compromise of signing infrastructure rather than a leaked key. That distinction matters, because it suggests the weak spot was how transactions got approved, not a password sitting in a drawer.

The FBI Names TraderTraitor

This weekend the FBI said the attack was tied to malicious cyber activity by TraderTraitor, the same actors behind the Bybit theft, according to the Associated Press. The bureau said the group was converting stolen assets mainly into ethereum, and it asked exchanges and analytics firms to block transactions linked to specific addresses so the money cannot be laundered.

TraderTraitor is a subunit of North Korea's Lazarus Group, a state-backed hacking squad that CoinDesk says steals money to fund the regime's weapons program. Chainalysis said it saw funds from the Binance hack mixing in real time with money stolen in last month's Bitget exploit, which had already been attributed to the same group.

Your Money and the Market

For regular users, the key line is that Binance says user funds are safe. The exchange said it reserved more than six point three four billion dollars of company money to cover the stolen assets and will use its Secure Asset Fund for Users to make customers whole. Blockchain partners have frozen about three billion dollars on-chain so far.

Withdrawals were suspended while the investigation continues, and CBS News reported Binance expected them to resume within a day or two. Deposits were described as unaffected.

The market felt it anyway. Bitcoin dropped sharply on Friday before rebounding above seventy-seven thousand dollars, and one market report said total crypto market cap was down around one hundred billion dollars since before the hack. CoinDesk reported that Standard Chartered expects prices could stay under pressure before finding a base.

Why This One Hits Different

Binance is not some sketchy side platform. It is the place millions of people park their coins, which is why the Binance hack feels like a stress test for the whole industry. If a single engineer's device can be a path to billions, every exchange has to ask how its own signing systems are locked down.

There is also the geopolitical angle. Two hacks in about a year at this scale, both pinned on one North Korean unit, show how crypto has become a funding pipeline for a sanctioned state. Expect regulators and exchanges to push harder on shared blocklists and faster freezes, and expect more details to drip out as investigators finish tracing the funds. For more on digital assets, see the crypto beat and world coverage on GenZ NewZ.