World’s biggest crypto heist: FBI says North Korean hackers stole US$6b from Binance

The FBI has accused North Korean hackers of stealing more than US$6 billion from cryptocurrency exchange Binance in what is believed to be the largest crypto heist on record. — File pic

First Published: Sunday, 01 Nov 2026 9:24 AM MYT

Last Modified: Sunday, 01 Nov 2026 9:25 AM MYT

NEW YORK, Nov 1 — The FBI yesterday accused North Korea of stealing more than US$6 billion (RM24.3 billion) in virtual assets from the cryptocurrency exchange Binance in what is thought to be the biggest-ever crypto heist.

The US law enforcement agency’s statement came as Binance offered reassurances it was covering the losses from the hacking attack, saying it has used company funds to buy tokens to replenish 90 per cent of what was stolen.

Binance is the world’s largest crypto exchange by daily trading volumes. News of the cyberattack caused the prices of most major cryptocurrencies to fall sharply on Friday.

The FBI confirmed earlier suspicions from private investigators and analysts that a North Korea-affiliated group called TraderTraitor was behind the hack.

TraderTraitor is the same group blamed for a US$1.5 billion theft from the Bybit platform in February last year.

“The Federal Bureau of Investigation (FBI) is releasing information advising the Democratic People’s Republic of Korea (North Korea) was responsible for the theft of more than US$6 billion USD in virtual assets from cryptocurrency exchange Binance, on or about October 29, 2026,” the statement said.

The FBI added that it had observed “TraderTraitor actors” converting stolen assets into Ethereum, and expected those assets to be laundered further by converting them using decentralized finance and instant swap services.

It said it was urging private sector entities “to block transactions with or derived from addresses TraderTraitor actors are using to launder these stolen assets.”

‘Cover the financial impact’

Binance said yesterday it has set aside more than US$6.34 billion in company funds to cover losses in the hack.

“Our commitment remains the same: Binance will fully cover the financial impact of the funds stolen in this incident,” the company said on X.

It said it has used company money to buy tokens to replenish 90 per cent of the stolen funds, while the remaining 10 per cent of tokens are “less liquid, which means they may take longer to source in the required amounts.”

Binance suspended user withdrawals after the hack, but said in its latest update they were on track to resume today.

The attack on Binance came as many observers express worries that the ever-expanding capabilities of artificial intelligence models could compromise cryptography and IT security protocols.

Bitcoin plunged nearly five per cent after the news of the hack, while Ethereum dropped nearly six per cent and BNB, native to Binance, tumbled nearly 10 per cent.

Binance said Friday it was working to resolve what it called a “complex attack” with several “points of breach.”

The sheer scale of the hack has put a spotlight on the capacity of North Korea — which faces extensive international sanctions over its nuclear and missile programs — to find illicit means to capture revenue.

TraderTraitor is believed to be part of the Lazarus Group, which gained notoriety in 2014 when it was accused of hacking into Sony Pictures as revenge for The Interview, a film that mocked North Korean leader Kim Jong Un. — AFP