Binance Hit by $6.3 Billion Theft Attributed to North Korean Group
October 30: Binance details compromised DevOps laptop entry point and more breach points; TRM Labs adds EIP-7702 delegations and chain breakdowns beyond prior summary.
North Korean-linked TraderTraitor stole $6.36 billion from Binance on October 29, 2026; nearly $3 billion frozen, exchange to cover losses.
North Korean group TraderTraitor stole about $6.36 billion from Binance wallets across ten blockchains on October 29, 2026, mostly in 20 minutes. Binance attributes the breach to a compromised DevOps engineer's laptop enabling unauthorized withdrawals, with no private-key leak found. Issuers froze nearly $3 billion while the exchange suspended withdrawals but resumed deposits and said SAFU and company funds will cover losses.
- Approximately $6.36 billion stolen from Binance wallets on 10 chains
- Compromised DevOps laptop used for withdrawals; no private key leak
- TRM Labs and Chainalysis attribute to North Korean TraderTraitor
- Nearly $3 billion frozen by issuers and partners
- Most funds moved within 20 minutes starting 20:05 UTC
- Withdrawals paused; SAFU to cover user losses
Timeline
dated events in the reporting · oldest first- Oct 29, 2026Attackers drain $6.36 billion from Binance wallets across 10 chains · TRM Labs
- Oct 29, 2026Most funds leave Binance wallets within 20 minutes from 20:05 UTC · TRM Labs
- Oct 30, 2026Binance reports compromised DevOps laptop for unauthorized withdrawals · The Hacker News
- Oct 30, 2026Issuers freeze nearly $3 billion in assets · SecurityWeek
- Oct 30, 2026TRM Labs and Chainalysis attribute theft to TraderTraitor · Chainalysis
- Oct 30, 2026Binance suspends withdrawals and says SAFU will cover losses · BleepingComputer
What each outlet adds
beyond the shared facts- TRM LabsDetailed $6.36 billion tracking across 10 chains and EIP-7702 usage
- ChainalysisHigh-confidence attribution to TraderTraitor and $6.4 billion estimate
- BinanceCompromised DevOps laptop theory, no private key leak, and SAFU coverage
- Tether and CircleSpecific freezes of over 1.5 billion USDT and 800 million USDC
- EllipticLink to prior Bitget theft and TraderTraitor wallet ties
- Vendors
- Binance
- Threat actors
- TraderTraitorLazarus GroupAPT38
- Victims
- Binance
- Organizations
- TetherCircleTRM LabsChainalysisTRMRippleWorld Liberty FinancialEllipticArbitrum Security Council
- Countries
- North Korea
Coverage
oldest first · one row per article · UTC- · 2d ago
The RecordFirst report
Binance confirms $6.3 billion crypto theft and freezes about half
Assets moved across 20 blockchains in about 20 minutes; Binance says customer losses will be covered.
- · 2d ago
The Hacker News
Binance says incident hit $6.3 billion; nearly $3 billion frozen
Binance blames a compromised DevOps laptop for unauthorized withdrawals and says SAFU will cover losses.
- · 2d ago
The Register · Security
Binance halts trading after laptop compromise tied to $6.3 billion
Binance says a DevOps laptop led to unauthorized withdrawals, user funds are safe, and no wallet private keys leaked.
- · 2d ago
Hacker News · security
Binance reports $6.3 billion crypto theft blamed on North Korea
Binance froze withdrawals, says about $3 billion is frozen on-chain, and pledges to cover the losses.
- · 2d ago
SecurityWeek
Binance loses about $6.3 billion in heist linked to TraderTraitor
TRM tracked $6.36 billion across ten chains in about 20 minutes; roughly $3 billion is frozen and $2.4 billion remains movable.
- · 2d ago
Help Net Security
Binance reports about $6.3 billion stolen in crypto heist
Binance will cover user losses, and close to $3 billion has already been frozen on-chain.
- · 2d ago
Cyber Security News
TRM ties $6.36 billion Binance theft to TraderTraitor
Sweeper contracts and EIP-7702 delegations drained hot wallets; about $2.7 billion was later frozen.
- · 2d ago
BleepingComputer
Binance links $6.3 billion crypto theft to compromised laptop
TRM and Chainalysis attribute the October 29 theft to North Korea’s TraderTraitor; Binance has not named a culprit.
- · 2d ago
Infosecurity Magazine
Binance confirms $6.3bn cryptocurrency theft in record heist
The exchange froze about $3bn, paused withdrawals, and says customer funds are covered; three firms blame TraderTraitor.
- · 2d ago
WIRED · Security
Binance wallets drained of about $6.3 billion in roughly 20 minutes
Tracing firms suspect North Korea’s TraderTraitor, which Binance has not confirmed; about $2.8 billion, mostly stablecoins, has been frozen.
- · 2d ago
Malwarebytes Labs
Binance says attackers stole about $6.3 billion in crypto
Binance reports freezing about $3 billion, denies a private-key leak, and says it will cover losses.
- · 2d ago
Ars Technica · Security
Hackers steal $6.3 billion from Binance in record crypto heist
Elliptic verified $2.8 billion frozen, mostly USDT and USDC, while Binance says private keys were not breached.
- · 2d ago
TechCrunch · Security
North Korean hackers blamed for record $6.3B Binance crypto theft
Binance says a compromised engineer laptop enabled unauthorized withdrawals and has halted deposits and withdrawals.
- · 2d ago
GBHackers
TraderTraitor drained about $6.36 billion from Binance wallets
TRM Labs says most funds left in about 20 minutes on October 29 across ten chains; Binance says user funds are safe.
- · 2d ago
Security Affairs
Binance ties roughly $6.3 billion crypto theft to a laptop
TRM and Chainalysis blame North Korea's TraderTraitor, while Binance says it has not identified who is responsible and will cover losses.
- · 13h ago
FBI confirms North Korean hackers stole over $6B from Binance
FBI links the $6.3 billion theft to the TraderTraitor group, with funds moving through DeFi platforms.
- · 13h ago
FBI links North Korea's TraderTraitor to $6.43 billion Binance crypto heist
The FBI attributed a $6.43 billion cryptocurrency theft to North Korean group TraderTraitor, which used trojanized Terraform and malware like FLATROOF.