FBI Attributes Binance Crypto Theft to North Korea
The FBI says North Korea was responsible for the theft of more than $6 billion in cryptocurrency from Binance on or about October 29, 2026. The reported loss has been placed at $6.3 billion, making the incident a major breach for the exchange and its customers.
In a public statement, the bureau identified the alleged activity as “TraderTraitor.” It said it and partners at the US Secret Service and IRS Criminal Investigation had observed actors associated with the operation converting stolen assets primarily into Ethereum. The FBI expects the assets to move through decentralized finance services and instant swap platforms as part of further laundering.
The statement did not provide substantial evidence explaining how investigators attributed the theft to North Korea. It also did not detail how much of the stolen cryptocurrency had already been converted or what steps authorities were taking to recover it. The attribution and assessment of the funds’ likely path therefore remain claims made by the FBI, rather than independently established findings in the information released.
Binance temporarily halted customer withdrawals after the theft. The exchange reopened withdrawals on November 1, following the freeze. The available account does not specify whether all withdrawal services returned at once or whether customers experienced continuing restrictions after reopening.
The case highlights two separate developments: investigators have publicly assigned responsibility for the theft, while Binance has resumed a customer service it suspended in response. Further information from investigators or the exchange would be needed to clarify the basis for the attribution, the movement of the stolen assets and the extent of any resulting losses to customers.
For now, authorities have not publicly detailed the evidence behind their attribution, the full route taken by the stolen cryptocurrency, or any recovery efforts. Those questions remain separate from Binance’s decision to restore customer withdrawal services.