#7Tech
FBI attributes a record Binance crypto theft to North Korea
US alert and blockchain firms name TraderTraitor in a theft above $6 billion.
1 Nov 2026, 08:03 · All sides · Written by Grok
9 sources · 4 countries🇺🇸 🇰🇷 🇬🇧 🇶🇦
- On or about October 29, 2026, more than $6 billion in virtual assets was stolen from the crypto exchange Binance.
- Two days later the FBI said North Korea did it.
- Binance said it had already replaced most of the money and started letting some withdrawals through again.
How the views differ
US cyber authorities and analysts who read exchange hacks as regime fundraising
People in this camp say TraderTraitor, tied to the Lazarus Group, has a track record of stealing crypto so Pyongyang can get hard currency outside normal banks.
They treat the FBI alert, plus earlier matching work from two blockchain firms, as confirmation rather than a guess.
In their reading, the haul is cyber-enabled revenue meant to dodge sanctions and pay for state programs.
- fbi.gov (St.)
- en.yna.co.kr (St.)
- thestreet.com (Ind.)
- reuters.com (Ind.)
- aljazeera.com (St.)
- bloomberg.com (Ind.)
Attribution skeptics and readers who stress denials and missing public proof
They do not dispute that Binance lost a huge sum.
They say the name on the theft comes mainly from US authorities and private firms matching old patterns, without arrests, charges, or a check that every outside party has signed.
North Korea has long called similar accusations absurd fabrications, and it has not confirmed this one. A few online posts floated an insider, but fact-checks found nothing to support that.
- reuters.com (Ind.)
- bbc.com (St.)
- koreatimes.co.kr (Ind.)
- View A — @ZakionBitcoin: “🇰🇵 رسمياً: الـFBI يكول كوريا الشمالية ورا سرقة باينانس مجموعة TraderTraitor سرقت أكثر من 6 مليار دولار…” Open on X ↗
A very large theft from Binance is the best-supported part of the story. Binance’s own account — replacing about 90–95% of the losses and restarting withdrawals in phases — lines up with the FBI’s description of a theft above $6 billion on or about October 29, 2026. That part does not depend on who did it. The perpetrator is a separate claim, and it is strong but not closed.
Grey areas. Ask to dive deeper
Grok checks every side again and answers with sources.
Popular questions
Ask anything about this story. It's free with an account, 1 a week.
- 2025
03-12: Bybit reports a large cryptocurrency theft.
- 2025
04-05: TRM Labs and Chainalysis attribute the Bybit incident to the Lazarus Group.
Coverage
9 sources · 4 countries
- State-funded 8
- X / on the ground 1
USKRGBQA
All sources
- FBI (official US government)On October 31, 2026, the FBI released a cyber alert saying North Korea stole more than $6 billion from Binance and tracking the activity as TraderTraitor. FBIState-funded · United States
- Yonhap News Agency (South Korean national news agency)Before that alert, TRM Labs and Chainalysis attributed about $6.3–6.36 billion to TraderTraitor, which they link to the Lazarus Group. Yonhap TheStreetState-funded · South Korea
- thestreet.comBefore that alert, TRM Labs and Chainalysis attributed about $6.3–6.36 billion to TraderTraitor, which they link to the Lazarus Group. Yonhap TheStreetState-funded
- Al Jazeera (independent)Binance said company funds had covered about 90–95% of the losses and that phased withdrawals had resumed, starting with the BTC network. Al Jazeera ReutersState-funded · Qatar
- Reuters (independent)Binance said company funds had covered about 90–95% of the losses and that phased withdrawals had resumed, starting with the BTC network. Al Jazeera ReutersState-funded · United Kingdom
- Bloomberg (independent)Sources: FBI; Reuters; Al Jazeera; Bloomberg; Yonhap; TRM Labs and Chainalysis, via those reports.State-funded · United States
- BBC (independent) — (and related coverage)The attribution rests on pattern-matching by US agencies and private firms, which is not the same as open proof everyone can re-run. Reuters BBCState-funded · United Kingdom
- koreatimes.co.krNorth Korea routinely denies hacks like this, and its missions did not respond to comment requests. Korea TimesState-funded · South Korea
- @ZakionBitcoinView A — @ZakionBitcoin: “🇰🇵 رسمياً: الـFBI يكول كوريا الشمالية ورا سرقة باينانس مجموعة TraderTraitor سرقت أكثر من 6 مليار دولار...”X / on the ground