Geopolitics
FBI formally blames North Korea's TraderTraitor for $6.3bn Binance heist
The largest crypto theft on record now has an official attribution; the FBI published wallet addresses and asked the industry to block laundering
The FBI said on Saturday that North Korea was behind the theft of about $6.3 billion in crypto assets from Binance, the world's largest exchange, naming the actor known as TraderTraitor. It is the bureau's first formal attribution in the case, which had long been suspected of North Korean involvement.
According to multiple outlets, the assets were drained within minutes on or around October 29, surpassing the $1.5 billion Bybit breach in February 2025 to become the biggest crypto hack in history. The FBI said it observed TraderTraitor converting the proceeds primarily into Ethereum and expects further laundering through decentralized finance and instant swap services; it published suspected addresses and urged exchanges and blockchain analytics firms to block related transactions.
Binance said it had used company money to buy replacement tokens covering 90 percent of the stolen assets, with reserves for the ten most liquid tokens, including bitcoin and ether, fully restored. The remaining 10 percent, consisting of less liquid tokens, will be bought on- and off-exchange. Funding came from the $1 billion Secure Asset Fund for Users (SAFU), its Futures Insurance Fund and corporate treasury; the company said it, not users, would absorb the loss.
Binance halted withdrawals after the breach and said it would reopen them on November 1, alongside a new proof-of-reserves snapshot letting users verify at least 1:1 backing. The FBI did not disclose the specific evidence behind its attribution or the initial intrusion vector. President Trump said on October 31 that he would communicate directly with Pyongyang if North Korea is confirmed responsible.
Sources:apnews.comaljazeera.com


