FBI links $6.3 billion Binance crypto heist to North Korean hackers
The FBI confirmed TraderTraitor state-sponsored hackers stole $6.3 billion from Binance on or about October 29, 2026.
The FBI has attributed a $6.3 billion cryptocurrency theft from Binance to North Korean hackers known as TraderTraitor (also Lazarus Group, Jade Sleet, and APT38). The attack occurred on or about October 29, 2026, via a compromised DevOps engineer's laptop. Binance has resumed the first phase of withdrawals after covering 95% of the stolen assets and stated it will bear the financial impact. The FBI published a list of 628 laundering addresses and urged exchanges to block them.
- TraderTraitor also tracked as Lazarus Group, Jade Sleet, APT38
- Theft spanned ten blockchains with most funds moved in 20 minutes
- Binance covered 95% of the $6.3 billion loss
- Previous attacks hit Bybit, Drift, and DMM Bitcoin
- Operation DreamJob social engineering used
Impact: theft of $6.3 billion USD in virtual assets from Binance
- 1.Block transactions to 628 listed addresses
- 2.Monitor DeFi platforms for laundering
- 3.Upgrade infrastructure safeguards
- Vendors
- Binance
- Products
- Binance platform
- Threat actors
- TraderTraitorLazarus GroupJade SleetAPT38
- Victims
- Binance
- Organizations
- FBITRM LabsChainalysisU.S. Secret ServiceIRS
- Countries
- North Korea
From the original article
3 min read at bleepingcomputer.com
The FBI has confirmed that North Korean state-sponsored hackers known as TraderTraitor were behind the $6. 3 billion crypto-theft attack on Binance, making it the largest cryptocurrency heist on record. [...]
By Lawrence Abrams · bleepingcomputer.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.