The Federal Bureau of Investigation (FBI) has revealed that North Korean hackers were responsible for the attack and theft of over $6.3 billion from Binance.
Two days after the attack that disrupted Binance, the world’s largest cryptocurrency exchange platform, the FBI on Saturday said, “the Democratic People’s Republic of Korea (North Korea) was responsible for the theft of more than $6 billion USD in virtual assets from cryptocurrency exchange Binance, on or about October 29, 2026.”
“The FBI refers to this specific North Korean malicious cyber activity as “TraderTraitor,” the US antigraft agency said.
“The FBI, together with partners at the USSS and IRS-CI, has observed TraderTraitor actors converting stolen assets primarily into Ethereum (ETH).”
It added, “It is expected these assets will then be further laundered by converting them using DeFi and instant swap services as they prepare them for further laundering stages.”
Urging members of the public globally to provide whatever information they have to support its investigations, the FBI reiterated its commitment to protecting the virtual asset community by identifying, mitigating and disrupting North Korea’s illicit cybercrime and virtual asset theft activities.
The FBI listed addresses holding or that have held assets from the theft, which are operated by or closely connected to North Korean TraderTraitor actors, on the Ethereum (ETH), Bitcoin and Solana blockchains.
On October 29, Binance suffered an attack in which hackers stole $6.3 billion from its platform. However, the cryptocurrency trading platform said it had set aside enough funds to cover the loss, assuring its users that they would suffer no losses.