The Federal Bureau of Investigation (FBI) has officially linked a massive cryptocurrency theft involving Binance, the world’s largest cryptocurrency exchange, to North Korean state-sponsored hackers. The incident resulted in the theft of more than $6 billion worth of digital assets, making it one of the largest cryptocurrency thefts ever reported. According to blockchain intelligence firm TRM Labs, approximately $6.3 billion was taken during the attack. The FBI identified the hacking operation as TraderTraitor and said the attack occurred around October 29, 2026.
According to TRM Labs, the attackers managed to move approximately $6.36 billion worth of cryptocurrency from Binance wallets across ten different blockchain networks. A major part of the stolen funds was transferred within approximately 20 minutes, making the incident particularly alarming. Binance initially suspected that a compromised laptop may have been involved in the attack. However, the exchange later confirmed that its investigation had uncovered additional points of breach.
The FBI attributed the attack to TraderTraitor, a North Korean hacking operation associated with state-sponsored cyber activities. The group has been linked to several cryptocurrency thefts and other financially motivated cyber operations. Investigators believe that North Korean hackers have increasingly targeted cryptocurrency platforms to steal digital assets and generate money. The latest incident highlights the growing threat posed by organised cybercriminal groups targeting the global financial and cryptocurrency industry.
Following the theft, investigators observed the attackers moving the stolen cryptocurrency into Ethereum (ETH). According to the FBI, the hackers were converting the stolen assets as part of an effort to make the funds harder to trace and recover. Authorities expect the attackers to use decentralised finance (DeFi) platforms and instant cryptocurrency swap services for additional money-laundering activities. The FBI, US Secret Service and Internal Revenue Service Criminal Investigation division are working together to track the transactions and prevent further movement of the stolen funds.
The FBI has also released a list of cryptocurrency wallet addresses connected to the suspected hackers. It has urged cryptocurrency exchanges, blockchain infrastructure providers, DeFi platforms and other virtual asset service providers to identify and block transactions linked to these addresses. This action is intended to prevent the attackers from moving the stolen assets through additional platforms. The investigation also highlights the importance of cooperation between law enforcement agencies and private blockchain companies in responding to large-scale cryptocurrency attacks.
In a significant development, Binance announced that it had covered approximately 95% of the stolen funds and planned to resume withdrawals in phases starting November 1, 2026. The exchange stated that the remaining 5% involved less liquid assets that could take longer to obtain in the required amounts. Meanwhile, the FBI continues to monitor the stolen cryptocurrency and investigate the North Korean hackers behind the operation. The incident serves as another warning about the growing risks facing cryptocurrency exchanges and the need for stronger security measures to protect digital assets.
Stay alert, and keep your security measures updated!
Source: Follow cybersecurity88 on X and LinkedIn for the latest cybersecurity news
