The FBI said North Korea's TraderTraitor was behind the theft of more than $6 billion from Binance and published hundreds of linked addresses. Binance began restoring withdrawals on Sunday, processing $4.649 billion in withdrawals and $1.01 billion in deposits in the first nine and a half hours, a net outflow of about $3.64 billion, or 2.1% of the $171 billion in assets reported in its latest proof of reserves. The FBI said the hackers mainly converted stolen assets into Ethereum and were expected to launder funds through DeFi and instant swap services, urging businesses to block transactions tied to hundreds of Ethereum addresses, 19 Bitcoin addresses and one Solana address. Chainalysis said more than $500 million had moved through Tron, while CEO Richard Teng said Binance had replenished about 95% of affected assets and would absorb the financial impact. According to Reuters, Circle has frozen more than $1.1 billion in USDC.
Summary written by Upside AI from the original article. Read the source for full details.
Read the original on Decrypt ↗
Keywords
BinancecryptoNorth Koreacybersecuritymoney laundering
Open a keyword to see other news on the same topic.
Related tickers and likely impact
BNB/USDT
▼ Likely negativeBNB
Relevance: high
| Market | Crypto |
|---|---|
| Exchange | Binance |
| Sector | Exchange tokens |
| Market cap | $92.9B |
| Close on 11/01/2026 | 712.69 |
| Change that session | +1.24% |
BTC/USDT
• NeutralBitcoin
Relevance: low
| Market | Crypto |
|---|---|
| Exchange | Binance |
| Sector | Layer 1 |
| Market cap | $1.6T |
| Close on 11/01/2026 | 78,354.00 |
| Change that session | +1.00% |
Impact is scored by AI from the headline and may be wrong. It is not investment advice.
Related news
- Binance sees $3.64 billion in net outflows as withdrawals resume after massive hack
Binance reported $3.64 billion in net outflows after reopening withdrawals on Sunday, as customers rushed to move funds following a $6.3 billion hack. Between 6 a.m. and 3:30 p.m. UTC, the exchange processed $4.65 billion in withdrawals and $1.01 billion in deposits. The net outflows equaled 2.1% of its $171 billion in total assets, based on its latest proof-of-reserves data. Most of the outflows happened in the first couple of hours, and withdrawal volumes have since stabilized, with services restored in phases across 15 networks while testing continues for the rest. The FBI attributed the hack to North Korean hackers known as TraderTraitor, and Binance said it had covered about 95% of the lost funds and would absorb the losses rather than pass them on to users.
- Binance net outflows surge to $5.8B as withdrawals resume after record hack
According to DefiLlama data, Binance recorded $5.8 billion in net outflows over the past 24 hours as customers withdrew funds after the record $6.3 billion hack. By 3:30 p.m. UTC, the exchange had processed $4.6 billion in withdrawals against $1 billion in deposits, resulting in $3.6 billion in net outflows. Binance said withdrawals surged initially but have since slowed and stabilized, and that the outflows were a small fraction of its roughly $171 billion in assets. By 12:36 UTC, withdrawals were enabled for tokens across 15 networks, including Bitcoin, Ethereum, BNB Smart Chain and XRP Ledger, with USDT, USDC and Bitcoin the most withdrawn. On Saturday, Binance said it had replaced 90% of the lost assets using its corporate treasury, Secure Asset Fund for Users and futures insurance fund.
- Binance says phase one of withdrawals opens after $6.3B hack
Binance said it reopened the Bitcoin network in phase one of resuming withdrawals, after suspending user withdrawals following a hack of about $6.3 billion on Thursday that the FBI blamed on North Korean operatives. The exchange said it will reopen withdrawals in phases, prioritizing tokens based on user demand over the past week, with stability and security checks completed before each network reopens. Users may face congestion, longer processing times and temporary delays, so failed withdrawals should be retried after a short wait. Binance said on Saturday it had replenished 90% of the stolen assets, up from 80% a day earlier. Updates will be posted on its official X channel, and users can check the withdrawal page or the network status page.
- FBI blames North Korea for record $6.3B Binance hack
The FBI attributes the theft of about $6.3 billion in digital assets from Binance on Thursday to North Korea, which it calls “TraderTraitor.” The stolen assets have mostly been converted into Ether (ETH) and are expected to be further converted through DeFi and instant swap services. The FBI urged private-sector entities, including THORNode and RPC node operators, instant exchanges, DeFi services and blockchain analytics firms, to block transactions with addresses used to launder the funds. According to CertiK, North Korea-linked groups accounted for about 60% of the value lost to crypto hacks in 2025, and an estimated $6.75 billion was stolen between 2016 and early 2026 across 263 incidents. CertiK's analysis concludes that North Korea has turned crypto theft into a core state revenue mechanism.
- FBI confirms North Korea's role in $6 billion Binance hack, asks DeFi community to block BTC, ETH, SOL addresses
- Binance says 90% of $6.3 billion hack losses are now covered, plans to resume withdrawals Sunday
Binance said it has covered up to 90% of the roughly $6.3 billion in tokens stolen from its hot wallets in a record crypto theft, and will keep buying the rest until coverage reaches 100%. The exchange said BTC, ETH, USDT, BNB, SOL, USDC, XRP, USD1, RLUSD and ZEC are fully backed, while the outstanding 10% consists of less liquid tokens outside its top 10. Funds come from its Secure Asset Fund for Users (SAFU), part of its Futures insurance fund and corporate treasury, and its next milestone is resuming withdrawals by Sunday, subject to security checks. The attack's method remains unclear: Binance first pointed to a compromised DevOps engineer's laptop, but co-CEO Richard Teng later said it involved a more complex process. TRM Labs pointed to North Korean hackers, citing similarities with the Bybit and KelpDAO hacks in April 2026.
Related markets
Latest news
- Fake nuclear warnings in Ukraine as Moscow, Kyiv report separate cyberattacks on emergency apps
Ukraine's Air Force said its Air Alert app was compromised by unauthorized persons, sending false nuclear and chemical threat warnings in Kyiv and other areas, and temporarily disabled push notifications. Two hours later, Russia's Ministry for Emergency Situations said its mobile app had been hit by a massive cyberattack that sent fake information, though it is unclear whether the incidents are linked. Separately, a local ceasefire in Oleshky, Kherson region, expired after allowing aid deliveries and the evacuation of hundreds of people. Zelenskyy said October was Russia's deadliest month since the invasion began, with 54,400 troops killed or badly wounded, while Ukraine liberated 96.2 square kilometers in October, 10.4 square kilometers more than Russia captured.
- Pecoy Copper Announces C$49.8 Million Strategic Financing Led by Hudbay Minerals
Pecoy Copper (TSXV: PCU) has entered into subscription agreements with Hudbay Minerals and an additional strategic investor to raise approximately C$49.8 million in gross proceeds at C$2.02 per share. Hudbay will subscribe for 14,914,100 shares (about C$30.1 million) and the strategic investor for 9,762,425 shares (about C$19.7 million), at a 10% premium to the 10-day VWAP on the TSXV as of October 30, 2026. Each investor is expected to hold about 9.99% of the outstanding shares after closing, and Hudbay would receive rights including participation in equity financings and the right to nominate one board director. Proceeds will fund exploration, resource definition and technical studies at the Pecoy copper-gold project in southern Peru, including a planned updated mineral resource estimate. Closing is expected on or about November 5, 2026, subject to customary conditions and TSXV acceptance.
- How oil prices could average $130 per barrel next year, according to Goldman Sachs
Analysts at Goldman Sachs said Brent crude could reach $140 a barrel next year if tensions worsen in the Middle East. The article provides no further details on the basis for the forecast.
- JPMorgan Global Select Equity ETF (JGLO) Adds Microsoft and NXP on Oct. 29
JPMorgan Global Select Equity ETF (JGLO) made 10 position additions and 7 reductions on Thursday, with gross activity of $122.6 million against $6.19 billion in assets. The fund was a net seller of $33.0 million, as sales of Alphabet ($22.0 million) and Apple ($21.0 million) outweighed its largest purchase, Microsoft ($18.9 million). Other notable buys included NXP Semiconductors ($6.6 million) and Meta Platforms ($6.4 million), while Taiwan Semiconductor ($16.2 million) was among the trimmed holdings. No positions were newly opened or fully exited.
- What State Street SPDR Portfolio S&P 500 ETF (SPYM) Bought: FICO Leads on Thursday
State Street SPDR Portfolio S&P 500 ETF (SPYM) recorded a net outflow of $110.3 million on Thursday, Oct. 29, with gross activity of $116.9 million. The fund added to 19 positions and reduced 479 across its 502-stock portfolio, a broad trimming pattern. Its largest purchases were Fair Isaac (FICO), Assurant (AIZ) and A.O. Smith (AOS), each at $0.3 million, while the biggest sales were NVIDIA ($8.6 million), Apple ($8.5 million) and Microsoft ($6.6 million). No new positions were opened and no holdings were fully exited.
- Spdr Dow Jones Industrial Avg ETF (DIA) Adds Goldman Sachs and Caterpillar on Thursday
Spdr Dow Jones Industrial Average ETF Trust (DIA) recorded net buying of $130.6 million on Thursday, with no shares sold, and increased all 30 of its positions without decreasing any. Within its $45.14 billion portfolio, the largest buys were Goldman Sachs Group ($13.8 million, lifting its weight to 10.53%), Caterpillar ($9.6 million) and Microsoft ($7.9 million). Amgen ($6.8 million) and UnitedHealth Group ($6.1 million) also drew buying. None of the purchases were new positions and there were no sellouts.
Get the briefing on Telegram or Zalo
Join the Upside Telegram channel or Zalo group for the Vietnam stocks and gold briefing at 8:00 and 19:00 (Vietnam time) on trading days, plus a weekly wrap on Saturday morning.