The US Federal Bureau of Investigation has identified North Korea as responsible for the massive cyberattack on cryptocurrency exchange Binance, which stole $6.3 billion worth of digital assets. According to US authorities, the operation was carried out by the hacker group "TraderTraitor", which is linked to the cyber structures of the Pyongyang regime.
According to the FBI, the attack occurred on October 29, 2026, and was a sophisticated operation in which hackers managed to penetrate the platform's systems and make unauthorized withdrawals from its digital wallets. The US agency announced that the "TraderTraitor" group has begun converting the stolen assets into the Ethereum cryptocurrency, while it is expected that they will then be laundered through decentralized finance platforms and instant cryptocurrency exchange services.
"TraderTraitor" is a North Korean state-sponsored hacking group that US authorities have linked to cryptocurrency theft and cyberattacks since 2020. The group is considered part of the "Lazarus" network, known for attacking blockchain technology companies and cryptocurrency platforms through electronic fraud and malware.
Following the attack, Binance temporarily suspended deposits and withdrawals while security teams launched an investigation and collaborated with authorities and specialized transaction tracking companies. According to reports, around $3 billion in affected assets have been identified and frozen by Binance and its partners.
The company initially announced that it had replaced about 90 percent of the amount affected by the attack, using its own funds, user insurance reserves and other company funds. However, in the latest update published on Sunday, Binance announced that it had already covered about 95 percent of the losses and had begun a gradual restoration of cryptocurrency withdrawals. The remainder consists of less liquid assets, which take longer to secure the necessary amount.
Binance Co-CEO Richard Teng has assured that users will not face financial consequences from the attack and that the company will cover the entire amount affected. "Your assets are safe," is the message conveyed by the platform's leader to customers.
