#3Business
About $6.4 Billion Taken From Binance; U.S. Blames North Korea, Which Denies It
About $6.4 billion left Binance hot wallets on 10-plus chains in minutes.
3 Nov 2026, 11:09 · All sides · Written by Grok
11 sources · 2 countries🇺🇸 🇨🇴
- Around October 29, 2026, attackers drained Binance hot wallets — internet-connected wallets that can send crypto quickly — across more than 10 blockchains, with most of the money gone in minutes.
- The exchange says it is covering all losses from its own funds.
- U.S. investigators blame a North Korea-linked group; North Korea says that charge is false.
How the views differ
U.S. law-enforcement and blockchain-intelligence narrative, carried by Western reporting
The FBI and several blockchain firms say this was not an unknown gang.
They name TraderTraitor, a North Korea-linked unit also called Lazarus or APT38, and say the job matches a long run of state crypto theft.
Their case is about how the coins moved on the public transfer record, not about a confession.
- decrypt.co (Ind.)
- thediplomat.com (Ind.)
- washingtonpost.com (Ind.)
North Korean state narrative, with a separate note of early U.S. political caution
Pyongyang’s answer is a flat no.
Kim Yo Jong, through state media, treated the FBI statement as an assault on the country and said Washington wants Pyongyang seen as a criminal cyber power.
That account rejects the accuser; it does not walk through the transfers.
- cnbc.com (Ind.)
- en.wikipedia.org (Ind.)
- thediplomat.com (Ind.)
- View A — @zippfeed: “The FBI links the $6.4B Binance theft to TraderTraitor, a North Korean hacking operation…” Open on X ↗
- View B — @HysterXBT: “North Korea has denied involvement in the $6.3 billion Binance hack, pushing back against the FBI's allegations. Kim Yo Jong… called Washington's accusations a ‘grave political provocation’…” Open on X ↗
The theft is the solid part. Binance and several newsrooms describe the same loss: about $6.3 to $6.4 billion, mostly in about 20 minutes, from hot wallets on more than 10 blockchains, around 20:05 UTC on October 29, 2026.
Grey areas. Ask to dive deeper
Grok checks every side again and answers with sources.
Ask anything about this story. It's free with an account, 1 a week.
Coverage
11 sources · 2 countries
- State-funded 3
- Independent 4
- X / on the ground 4
USCO
All sources
- washingtonpost.comThe transfers clustered around 20:05 UTC and moved about $6.3–6.4 billion, mostly within about 20 minutes. (Washington Post, Decrypt)Independent · United States
- decrypt.coThe transfers clustered around 20:05 UTC and moved about $6.3–6.4 billion, mostly within about 20 minutes. (Washington Post, Decrypt)Independent · Colombia
- Partners and token issuers froze about $3 billion. (Binance)Binance said the first cause it found was a compromised engineer’s laptop, later found more breach points, and said no private keys leaked. (Binance)Independent
- irishtimes.comBinance set aside about $6.34 billion from SAFU, its user-protection fund, and its treasury, and said more than 90% had been replenished, while saying it is covering all losses. (Binance, Irish Times)Independent
- Trump (Oct 31)They say the transfer pattern matches earlier North Korea-linked heists, including Bybit in 2025. (The Diplomat)State-funded
- North Korea denies any role in the theft. (CNBC)“absurd rhetoric” — Kim Yo Jong, via KCNA, accusing Washington of trying to portray Pyongyang as a “cyber criminal state.” (CNBC, Wikipedia)State-funded · United States
- SourcesThe denial was carried by KCNA, the state news agency. (Wikipedia)State-funded
- @zippfeedView A — @zippfeed: “The FBI links the $6.4B Binance theft to TraderTraitor, a North Korean hacking operation...”X / on the ground
- @dogeofficialceoView A — @dogeofficialceo: “The FBI blamed North Korea for a $6.3 billion Binance hack...”X / on the ground
- @HysterXBTView B — @HysterXBT: “North Korea has denied involvement in the $6.3 billion Binance hack, pushing back against the FBI's allegations. Kim Yo Jong... called Washington's accusations a ‘grave political provocation’...”X / on the ground
- @anadoluagencyView B — @anadoluagency: “North Korea rejects US allegations... Kim Jong Un's sister calls accusations 'grave political provocation'...”X / on the ground