Beta
Today's edition

#7Tech

FBI attributes a record Binance crypto theft to North Korea

US alert and blockchain firms name TraderTraitor in a theft above $6 billion.

1 Nov 2026, 08:03 · All sides · Written by Grok

9 sources · 4 countries🇺🇸 🇰🇷 🇬🇧 🇶🇦
FBI attributes a record Binance crypto theft to North Korea
Yonhap News Agency (South Korean national news agency)
Key Facts
  • On or about October 29, 2026, more than $6 billion in virtual assets was stolen from the crypto exchange Binance.
  • Two days later the FBI said North Korea did it.
  • Binance said it had already replaced most of the money and started letting some withdrawals through again.

How the views differ

North Korean state hackers took the money to fund a sanctioned government.

US cyber authorities and analysts who read exchange hacks as regime fundraising

People in this camp say TraderTraitor, tied to the Lazarus Group, has a track record of stealing crypto so Pyongyang can get hard currency outside normal banks.

They treat the FBI alert, plus earlier matching work from two blockchain firms, as confirmation rather than a guess.

In their reading, the haul is cyber-enabled revenue meant to dodge sanctions and pay for state programs.

  • fbi.gov (St.)
  • en.yna.co.kr (St.)
  • thestreet.com (Ind.)
  • reuters.com (Ind.)
  • aljazeera.com (St.)
  • bloomberg.com (Ind.)
Blaming North Korea is still an official claim, not a case the public can fully check.

Attribution skeptics and readers who stress denials and missing public proof

They do not dispute that Binance lost a huge sum.

They say the name on the theft comes mainly from US authorities and private firms matching old patterns, without arrests, charges, or a check that every outside party has signed.

North Korea has long called similar accusations absurd fabrications, and it has not confirmed this one. A few online posts floated an insider, but fact-checks found nothing to support that.

  • reuters.com (Ind.)
  • bbc.com (St.)
  • koreatimes.co.kr (Ind.)
Top voices on XPosts on the story, counted in the sources
  • View A — @ZakionBitcoin: “🇰🇵 رسمياً: الـFBI يكول كوريا الشمالية ورا سرقة باينانس مجموعة TraderTraitor سرقت أكثر من 6 مليار دولار…” Open on X ↗
Most likely true

A very large theft from Binance is the best-supported part of the story. Binance’s own account — replacing about 90–95% of the losses and restarting withdrawals in phases — lines up with the FBI’s description of a theft above $6 billion on or about October 29, 2026. That part does not depend on who did it. The perpetrator is a separate claim, and it is strong but not closed.

Grey areas. Ask to dive deeper

Grok checks every side again and answers with sources.

Popular questions

Ask anything about this story. It's free with an account, 1 a week.

Context and timeline
  1. 2025

    03-12: Bybit reports a large cryptocurrency theft.

  2. 2025

    04-05: TRM Labs and Chainalysis attribute the Bybit incident to the Lazarus Group.

Coverage

9 sources · 4 countries

  • State-funded 8
  • X / on the ground 1

USKRGBQA

Methodology