The FBI stated on Saturday that North Korea orchestrated the theft of more than $6 billion in virtual assets from the cryptocurrency exchange Binance. According to the US law enforcement agency, the breach occurred on or about October 29, 2026, and unfolded within a matter of minutes.
Details of the Historic Heist
The stolen digital assets encompassed bitcoin, ethereum, and stablecoins including tether and USD Coin, whose values are tied to traditional currencies. The swift cyberattack is considered the largest cryptocurrency heist in history, prompting a slump in the prices of most major cryptocurrencies on Friday.
The FBI attributed the breach to malicious cyber activity linked to an entity called TraderTraitor. This group was previously identified as responsible for a $1.5 billion hack against the Bybit exchange last year. The agency reported that it observed TraderTraitor members converting the stolen funds primarily into ethereum.
The FBI noted that these assets are anticipated to undergo further laundering via decentralized finance and instant swap services to obscure their origins. Consequently, the agency urged cryptocurrency exchanges and blockchain analytics firms to block transactions connected to specific addresses.
Binance Response and Recovery Efforts
Binance, which stands as the world’s largest cryptocurrency exchange by daily trading volumes, announced Saturday that it would use more than $6.34 billion in company funds to purchase tokens. This measure aims to replenish approximately 90% of the assets lost during the breach.
The company explained that the remaining 10% of the stolen funds involved less liquid tokens that will require more time to repurchase. In a statement posted on X, the exchange emphasized its commitment to handling the fallout, stating that the organization will fully cover the financial impact resulting from the incident.
The massive cyberattack occurred amid rising concerns across the technology sector that advancing artificial intelligence capabilities could threaten cryptography and IT security infrastructure.
