Security

Binance crypto heist – tracking attribution to North Korea and official response

The North Korean hacking unit TraderTraitor stole $6.4 billion from Binance on October 29, 2026, by compromising an engineer's laptop to access service containers. Binance expects to resume withdrawal services by November 1, 2026, while waiting for the U.S. Treasury or the United Nations to issue a public attribution.

Binance crypto heist – tracking attribution to North Korea and official response

The story so far

written Oct 30

What is happening

Binance faces a record $6.4 billion theft that threatens the exchange's liquidity and tests the security of cross-chain protocols 12. Blockchain intelligence firms TRM Labs and Chainalysis attributed the breach to the North Korean hacking unit TraderTraitor on October 30, 2026 12. Attackers accessed a service container through a compromised laptop belonging to an engineer to execute unauthorized withdrawals across ten different blockchains 156.

Stablecoin issuers and industry partners have frozen roughly $3 billion of the stolen funds 126. Binance co-CEO Richard Teng stated the company will use corporate reserves and emergency asset funds to cover all user losses 1. The exchange suspended all withdrawals following the breach 1.

What to watch

Binance expects to resume withdrawal services by November 1, 2026 1. A public attribution of the theft to North Korea by the U.S. Treasury or the United Nations would establish official government positions on the incident. The announcement of sanctions or asset freezes against specific North Korean entities by federal regulators would signal the start of formal enforcement actions.

A formal legal complaint filed by Binance in a U.S. court would initiate litigation to recover assets. A final ruling on liability or restitution from a regulatory body or court would determine the long-term financial responsibility for the breach.

Read the full brief · how we got here

How we got here

The theft occurred late Thursday, October 29, 2026 15. It follows an August 19, 2026, ruling by the US Court of Appeals for the Eleventh Circuit, which allowed eight victims of previous cryptocurrency thefts to sue Binance Holdings and BAM Trading Services in a Florida federal court 3. That ruling permitted the litigation to proceed in public court rather than through private arbitration 3.

References · 5
  1. 1cnn.com — Binance: North Korea suspected in record $6 billion theft from ... - CNN
  2. 2cryptotimes.io — North Korea's TraderTraitor Linked to Record $6.4B Binance Hack
  3. 3en.cryptonomist.ch — Binance Cryptocurrency Theft Lawsuit Advances in Court
  4. 5theguardian.com — North Korean group blamed for $6.3bn Binance hack in biggest ever ...
  5. 6corp-intl.com — Binance hack: inside the $6.3bn crypto theft - corp-intl.com

What would close this

0 of 4 met
U.S. Treasury or UN publicly attributes the theft to North Korea.open
Sanctions or asset freezes are announced against the identified North Korean entities.open
Binance files a formal legal complaint in a U.S. court.open
A court or regulatory body issues a final ruling on liability or restitution.open
If none of these happen, this page closes automatically on .

Timeline

1newest first
Link

When we started following: North Korea’s TraderTraitor unit linked to record $6.4 billion Binance theft

Blockchain intelligence firms TRM Labs and Chainalysis attributed a record $6.4 billion theft from Binance to the North Korean hacking unit TraderTraitor on October 30, 2026 12. The breach occurred late Thursday, October 29, when attackers accessed a service container via a compromised engineer's laptop to submit unauthorized withdrawals across ten blockchains 156. Binance suspended withdrawals and expects to resume services by November 1, 2026 1.

Industry partners and stablecoin issuers have frozen approximately $3 billion of the stolen assets 126. Binance co-CEO Richard Teng stated the company will cover all losses using corporate and emergency asset funds 1. The theft follows an August 19, 2026, ruling by the US Court of Appeals for the Eleventh Circuit, which allowed eight victims of prior cryptocurrency thefts to proceed with litigation against Binance Holdings and BAM Trading Services in a Florida federal court rather than through arbitration 3.