FBI blames North Korea for $6 billion Binance crypto theft
Original title: FBI Blames North Korea for $6 Billion Binance Crypto Theft
On October 29 attackers moved about $6.36 billion from Binance wallets; issuers later froze part of the funds.
The FBI says North Korea’s TraderTraitor group, also tracked as Lazarus Group and APT38, stole more than $6 billion from Binance on or about October 29, 2026. Attackers used an engineer’s laptop to reach a service container and send unauthorized withdrawals; Binance reports no stolen wallet private keys. TRM estimates $6.36 billion left across ten blockchains, mostly within 20 minutes. Agencies urge crypto firms to block listed addresses and funds derived from them.
Unconfirmed: Binance has not named a culprit, and early freeze totals cover different moments.
- TRM says most funds moved in about 20 minutes from 20:05 UTC.
- Stolen assets were converted mainly into Ethereum ahead of further laundering.
- Tether, Circle, Ripple and World Liberty Financial froze about $2.67 billion.
- The attacker still holds over 420,000 ETH and 18,270 BTC.
- Binance suspended withdrawals on several networks but has not named a culprit.
Impact: theft of more than $6 billion in virtual assets
- 1.Block transactions to FBI-listed addresses and funds derived from them.
- 2.Compare service blocklists with the address list in the FBI alert.
- 3.Report related information to a local FBI office or ic3.gov.
- ATT&CK
- T1078 Valid Accounts
- Threat actors
- TraderTraitorLazarus GroupAPT38
- Victims
- Binance
- Organizations
- FBITRMChainalysisUSSSIRS-CI
- Countries
- North Korea
From the original article
4 min read at securityaffairs.com
The FBI blames North Korea for stealing $6 billion from Binance and urges crypto firms to block transactions linked to the stolen funds. The FBI has named North Korea as the party behind the theft of more than $6 billion in virtual assets from the crypto exchange Binance, on or about October 29, 2026. The […]
By Pierluigi Paganini · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.