North Korea's TraderTraitor Group Blamed for Record $6.3 Billion Binance Crypto Theft

The Binance cryptocurrency exchange suffered a $6.3 billion theft on October 29, 2026, in what investigators are calling the largest cryptocurrency heist on record.

The attack began at approximately 4:05 p.m. ET and lasted about 20 minutes. Hackers moved roughly $6.36 billion across ten different blockchains, with Ethereum accounting for $3.8 billion of the losses and Bitcoin for $1.5 billion. TRON, XRP, and Solana were also affected.

Investigators determined that the attackers exploited a multi-signature protocol known as EIP-7702 to gain unauthorized access to Binance's hot wallet.

Blockchain intelligence firms TRM Labs, Chainalysis, and Elliptic attributed the attack to TraderTraitor, an elite hacking unit linked to North Korea's state-backed Lazarus Group. The FBI officially confirmed North Korea's responsibility on October 31, 2026. Experts say the North Korean regime uses such operations to generate foreign currency and fund its weapons programs while bypassing international sanctions.

Binance suspended all deposits and withdrawals immediately after the breach. The exchange coordinated with Tether and Circle to freeze approximately $3 billion in stolen stablecoins. By November 1, Binance had resumed withdrawal services and reported that it had replenished about 90 percent of the lost assets, with the remainder consisting of less liquid tokens.

Binance publicly committed to covering all customer losses using its Secure Asset Fund and corporate treasury. The U.S. Secret Service and FBI remain involved in efforts to track and recover the remaining stolen funds.