North Korean hackers suspected in $6.3 billion Binance cryptocurrency theft

SENSEX 74,511.57

+ 360.53

NIFTY 23,058.30

+ 121.55

CRUDEOIL 9,845.00

+ 136.00

GOLD 141,877.00

 -719.00

SILVER 185,065.00

 -4,388.00

SENSEX 74,511.57

+ 360.53

NIFTY 23,058.30

+ 121.55

NIFTY 23,058.30

+ 121.55

CRUDEOIL 9,845.00

+ 136.00

CRUDEOIL 9,845.00

+ 136.00

GOLD 141,877.00

 -719.00

'; } document.getElementById("lgdv").innerHTML = htmlElements; } function numberformat(i) { return Number(parseFloat(i).toFixed(2)).toLocaleString('en', { minimumFractionDigits: 2 }) } async function gatherResponse(response) { const { headers } = response; const contentType = headers.get('content-type') || ''; if (contentType.includes('application/json')) { return await response.json() } return response.text(); } function getWidth() { if (Math.max(document.body.scrollWidth,document.documentElement.scrollWidth,document.body.offsetWidth,document.documentElement.offsetWidth,document.documentElement.clientWidth) > 991) { document.getElementById("mob").style.display = "none"; document.getElementById("lgdv").style.display = "block"; } else { document.getElementById("mob").style.display = "block"; document.getElementById("lgdv").style.display = "none"; } } getWidth(); THIS AD SUPPORTS OUR JOURNALISM. SUBSCRIBE FOR MINIMAL ADS.THIS AD SUPPORTS OUR JOURNALISM. SUBSCRIBE FOR MINIMAL ADS.

Blockchain intelligence firms have linked the record cryptocurrency theft to a North Korean hacking group, while Binance says it will cover losses

By AP- PTI

Updated - October 30, 2026 at 03:07 PM. | New York

FILE PHOTO: Binance founder Changpeng Zhao, also known as CZ, said user funds were safe following the suspected $6.3 billion cryptocurrency theft. | Photo Credit: FLORENCE LO

US-based blockchain intelligence firm TRM said a North Korean hacking unit was likely behind the theft of more than USD 6 billion on the world’s biggest cryptocurrency exchange, Binance.

Binance said late on Thursday that approximately USD 6.3 billion was impacted, which its founder described as “like a hack.”

The company said it worked with blockchain partners to freeze affected assets, and roughly USD 3 billion was frozen.

The cryptocurrency exchange added that it had temporarily suspended deposits and withdrawals while security checks are completed.

• Read also: Binance hit with security attack impacting assets worth $6.3 billion

North Korean hacking unit suspected

TRM, in a post on its website Thursday, attributed the attack to TraderTraitor, which it described as North Korea’s elite hacking unit. “We make this judgment with high confidence,” the firm said.

“An attacker moved approximately USD 6.36 billion out of Binance wallets on ten blockchains, most of it in about 20 minutes,” TRM said. That would make the hack the largest cryptocurrency theft on record, it said.

In February last year, another cryptocurrency exchange, Bybit, suffered a USD 1.5 billion hit when it was hacked. The FBI said North Korea and TraderTraitor were responsible for the hack.

“Several features of this attack match earlier North Korea-linked heists, including the Bybit hack,” TRM said.

Blockchain analysis company Chainalysis also believed the Binance hack was “likely done by DPRK group TraderTraitor,” its co-founder and CEO Jonathan Levin wrote on X. DPRK stands for the Democratic People’s Republic of Korea, North Korea’s official name.

Binance working with law enforcement

Asked about the potential ties to North Korea, a Binance spokesperson said only that the company is “working closely with our law enforcement partners to confirm the identity of the criminals and bring them to justice.”

Experts say North Korea has turned to crypto hacking and other illicit cyber activities as a source of badly needed foreign currency to support its troubled economy and fund its nuclear program in the wake of tough UN sanctions and other difficulties.

In December 2022, South Korea’s spy agency said North Korean hackers had stolen an estimated 1.5 trillion won (USD 1.1 billion) in cryptocurrency and other virtual assets in the past five years, more than half of it in 2022 alone. It said North Korea’s capacity to steal digital assets was considered among the best in the world.

Binance founder says user funds are safe

Changpeng Zhao, also known as CZ, founded Binance in 2017. In 2023, he pleaded guilty to a felony linked to failing to prevent money laundering on the platform, and stepped down as the company’s CEO. US President Donald Trump pardoned Zhao in 2025.

Zhao posted Thursday on X that “User funds are safe!” but added that the theft “does look like a hack on Binance.” He added that while he doesn’t manage Binance anymore, “as a shareholder, I expect all user funds will be fully covered.”

On Thursday, Binance said it would cover the losses from the apparent hack.

Security controls under scrutiny

The event, meanwhile, also raises questions about why stronger approval controls were not in place, said Kok Tin Gan, cofounder and CEO of cybersecurity firm NyxLab.

“This looks like one signature that gave the attacker a never-expiring, full-access token to a Binance hot wallet,” he said, referring to cryptocurrency wallets that hold users’ “private keys,” or unique authorisations, digitally and which are connected to the internet.

Binance said on X it had “found no evidence of any wallet private key leak” and that the company would release more technical details when its probe is complete.

Published on October 30, 2026

THIS AD SUPPORTS OUR JOURNALISM. SUBSCRIBE FOR MINIMAL ADS. THIS AD SUPPORTS OUR JOURNALISM. SUBSCRIBE FOR MINIMAL ADS. THIS AD SUPPORTS OUR JOURNALISM. SUBSCRIBE FOR MINIMAL ADS. THIS AD SUPPORTS OUR JOURNALISM. SUBSCRIBE FOR MINIMAL ADS.Sign into Unlock benefits!

• Access 10 free stories per month
• Get notified by email for early preview to new features, discounts & offers