Alleged North Korean hackers drained $6.3 billion from Binance in just 20 minutes, the largest crypto hack on record, according to the exchange. The attackers compromised an engineer's work computer through a fake job interview, used an internal AI tool to take over other engineers' computers, and then hijacked an internal wallet signing service with stolen credentials. The article also describes other tactics linked to North Korean groups, including fake employees, fake job interviews and poisoned code libraries, and Binance said it detected and prevented 57 suspected North Korea-linked cases in 2026. One group reportedly infected at least 30,000 devices in more than 100 countries between December 2025 and July 2026, took funds or credentials from over 7,000 crypto wallets, and moved around $10.71 million to North Korea. One estimate attributes 60% of all losses last year to DPRK-linked groups.
Summary written by Upside AI from the original article. Read the source for full details.
Read the original on Decrypt ↗
Keywords
cryptocybersecurityBinanceNorth Korea
Open a keyword to see other news on the same topic.
Related tickers and likely impact
BNB/USDT
▼ Likely negativeBNB
Relevance: medium
| Market | Crypto |
|---|---|
| Exchange | Binance |
| Sector | Exchange tokens |
| Market cap | $92.9B |
| Close on 11/02/2026 | 699.25 |
| Change that session | -1.89% |
BTC/USDT
• NeutralBitcoin
Relevance: low
| Market | Crypto |
|---|---|
| Exchange | Binance |
| Sector | Layer 1 |
| Market cap | $1.6T |
| Close on 11/02/2026 | 76,816.00 |
| Change that session | -1.96% |
Impact is scored by AI from the headline and may be wrong. It is not investment advice.
Related news
- Binance traces $6.3B hack to fake job interviews, compromised AI tool
Binance's postmortem says the attackers spent months inside its systems, starting with a tampered package an engineer installed while setting up an AI coding tool. Later, fake recruiters tricked another engineer into running a malicious file disguised as a coding assignment, and the hackers used the compromised machines to gain deployment credentials and plant malware in the wallet infrastructure on October 29. They then accessed the wallet-signing service to move funds outside normal withdrawals, and exploited Ethereum's EIP-7702 to keep unauthorized transfers going after withdrawals were suspended. About $6.3 billion was affected, with $2.85 billion frozen or intercepted, and Binance said it would absorb the losses and had replenished 98% of affected token assets as of October 31. The FBI attributes the attack to North Korean hackers, which Kim Yo Jong, sister of Kim Jong Un, denied.
- North Korea Denies $6.3B Binance Hack, Calls FBI Finding a 'Political Provocation'
North Korea has denied involvement in the Binance hack, with Kim Yo Jong calling U.S. accusations a “sinister” attempt to damage the country's image and criticizing the Trump administration's plan to use confiscated crypto as a strategic reserve. The FBI attributed the theft to TraderTraitor, the group it also blamed for the $1.5 billion Bybit hack in February 2025, with about $2.85 billion of the $6.43 billion stolen frozen or seized. The funds are being laundered across about 12,000 wallets, with a new wallet created roughly every 25 seconds. Binance said net withdrawals reached $4.72 billion since withdrawals resumed on Sunday, hourly deposits exceeded withdrawals by late Monday, and it has covered about 95% of stolen assets.
- North Korea denies role in $6.4 billion Binance hack after FBI points to TraderTraitor
- North Korea denies links to Binance hack as researchers trace stolen billions
North Korea has rejected U.S. allegations that it was behind the roughly $6.3 billion Binance hack, calling the accusation a “grave political provocation,” according to state media. Kim Yo Jong, sister of leader Kim Jong Un, criticized the FBI for attributing the attack to the North Korea-linked group TraderTraitor. Blockchain analysts Elliptic and Chainalysis say the hackers used roughly 12,000 wallets across 11 blockchains in the first four days, making more than 40,000 transactions, mostly routed through Tron before moving to Ethereum via cross-chain bridges. About $2.85 billion, or 44% of the $6.43 billion Elliptic says was stolen, has been frozen or seized, while about $3.24 billion remains in linked addresses. Binance said it has covered about 95% of the affected amount and is resuming withdrawals in phases.
- North Korea denies role in $6.3B Binance hack, points finger at US
Kim Yo Jong, sister of North Korean leader Kim Jong Un, denied North Korea's involvement in the $6.3 billion Binance hack and called the US allegations politically motivated. She gave no evidence when suggesting the US could be behind the theft, and also rejected the FBI's blame for the $1.5 billion Bybit hack in February 2025. By contrast, TRM Labs attributed the attack to North Korea's TraderTraitor group with high confidence, while Chainalysis and ZachXBT also linked it to North Korean hackers. ZachXBT said funds stolen in the Binance and Bitget hacks were commingled at the same address after passing through THORChain, and Bitget CEO Gracy Chen said IP addresses were linked to VPN services used by a certain DPRK group.
- North Korea's Bitcoin heist is worth 3x its exports and more than Tesla holds
The Bitcoin stolen from Binance is now worth more than Tesla's entire treasury holdings. The amount also dwarfs North Korea's annual trade.
Related markets
Latest news
- What Would Warren Buffett Do With Nike Stock Down 38% in 2026?
Nike expects fiscal 2027 sales to decline by a high-single-digit percentage, and the stock has fallen 38% in 2026 as of the article's writing. Citing Warren Buffett's 1996 Berkshire Hathaway shareholder letter, 'If you aren't willing to own a stock for ten years, don't even think about owning it for ten minutes,' the article suggests shareholders evaluate their conviction in the stock. Investors who doubt a recovery may consider whether Nike still belongs in their portfolio and whether proceeds from selling its shares could fund a higher-conviction position, while those who expect a turnaround can give CEO Elliott Hill more time. The dividend yields 4.1% at the current stock price.
- Meta seeks to raise up to $25 billion in debt sale as AI spending jumps
Meta is seeking to raise between $20 billion and $25 billion in a bond sale on Tuesday as it steps up spending on AI infrastructure, models and services. The offering is expected to be about two-thirds in U.S. dollars and one-third in euros, with final pricing due Tuesday afternoon. It follows S&P Global Ratings' revision of Meta's outlook from AA- stable to AA- negative, citing uncertainty over its heavy capex and negative free cash flow. Meta's full-year capex is now expected at $135 billion to $145 billion, and the company plans to raise $95 billion for AI initiatives, including $35 billion through underwritten public equity offerings and $60 billion via an at-the-market program.
- Energy Transfer Just Delivered a Monster Quarter. Is Its High-Yielding Stock a Buy?
Energy Transfer posted a strong quarter, with adjusted EBITDA of $5 billion, up 31% year over year, and distributable cash flow up 33% to $2.5 billion. Growth came from natural gas transportation, where intrastate EBITDA rose 50% to $346 million after the early completion of the Hugh Brinson Pipeline, and from NGL and refined-products EBITDA, up 16% to $1.2 billion. The company raised full-year adjusted EBITDA guidance by $850 million at the midpoint to $19.7–19.9 billion, though part of that growth came from acquisitions. Growth capital spending for 2026 was lowered to $5.4–5.6 billion, while about $7 billion is expected in 2027. Distributable cash flow of $7.8 billion through nine months covered the 6.7%-yielding distribution 2.2 times, and the company agreed to acquire Vaquero Midstream for $2.6 billion.
- Amazon Stocks Edge Higher as Custom-Chip Commitments Increase More Than 20-Fold
Amazon shares edged up 0.21% to $246.15 at 10:45 a.m. ET on November 3 as investors weighed the cloud outlook after quarterly results. The main highlight is that revenue commitments for Graviton and Trainium each rose more than twentyfold from a year earlier. Management said inference, which runs trained AI models, accounts for well over half of AWS AI revenue, and plans to offer Trainium outside AWS in late 2027. AWS revenue was approximately $46 billion and operating income $17.8 billion, implying an operating margin of about 38.7%. The key questions are whether these commitments turn into paying usage and whether cloud margins hold up as infrastructure costs rise.
- Once election results are in, here’s what investors should focus on next
The article stresses that investors should separate their political views from their investment and trading decisions.
- Apple earnings analysis: questions answered and next catalysts
Apple beat fiscal Q4 2026 expectations (reported Nov 2, 2026) with revenue of $114.48 billion and EPS of $2.10, yet the stock fell to $332.64 (-1.68%) as of 12:49 PM EST on Nov 3. The selling was driven by guidance: December-quarter gross margin of 45% to 46% against a consensus of 46.9%, and Services growth of 8% to 9% versus about 10.7% expected, with memory costs and Siri AI ramp costs adding pressure. iPhone revenue reached $57.58 billion, up about 17.5%, while tariff refunds added about 1 point to gross margin, though management said most refunds have been received. Analysts are divided on the AI strategy and valuation, with UBS expecting the P/E to compress to about 31x from 36x. The next earnings report is tentatively set for about Feb 4, 2027.
Get the briefing on Telegram or Zalo
Join the Upside Telegram channel or Zalo group for the Vietnam stocks and gold briefing at 8:00 and 19:00 (Vietnam time) on trading days, plus a weekly wrap on Saturday morning.