FBI Blames North Korea for $6.3 Billion Binance Crypto Heist

The FBI has attributed the $6.3 billion theft from cryptocurrency exchange Binance to North Korea. In a statement, the agency said the Democratic People's Republic of Korea was responsible for the attack, which took place on or about October 29, 2026.

The bureau refers to this specific North Korean cyber activity as "TraderTraitor." It did not publish much supporting evidence or technical detail alongside the attribution.

Laundering already under way

According to the FBI, which is working with the U.S. Secret Service and IRS Criminal Investigation, TraderTraitor actors have been observed converting the stolen assets primarily into Ethereum (ETH). Investigators expect the funds to be laundered further through decentralized finance (DeFi) services and instant swap platforms, as the actors prepare the assets for later laundering stages.

Converting tokens into ETH is a common early step because it makes the funds easier to move and swap across services. The FBI's warning suggests authorities are tracking the flows in real time, though the statement does not say whether any of the money has been frozen or recovered.

Binance resumes withdrawals

Binance froze customer withdrawals in the immediate aftermath of the hack. As expected, the exchange reopened withdrawals today, allowing users to move funds again.

The statement does not explain how the attackers got in, how customers will be affected, or how the losses will be covered.

Why it matters

At more than $6 billion, the theft is one of the largest crypto heists ever attributed to a state-linked group. For users, it is a reminder that even the biggest exchanges remain high-value targets. For the industry, pressure is likely to grow on DeFi and swap services that can be used to obscure stolen funds. Further details from the FBI and Binance would be needed to understand the full scale of the impact.