News · Decrypt

North Korea Is Laundering Binance Hack Loot at One New Wallet Every 25 Seconds

According to Elliptic, North Korean hackers spread the $6.43 billion stolen from Binance across about 12,000 wallets on 11 blockchains in under four days, with more than 40,000 transactions. Thanks to fast freezes by Tether and Circle, about 44% of the funds, or $2.85 billion, has been frozen or seized, compared with roughly 3% after the $1.5 billion Bybit hack in February 2025, though about $786 million in stablecoins still got away. About $3.24 billion remains in linked addresses, and Elliptic expects the funds to be cashed out over months through over-the-counter brokers. The FBI has attributed the attack to TraderTraitor, a North Korean state-linked hacking group.

Summary written by Upside AI from the original article. Read the source for full details.

Read the original on Decrypt ↗

Keywords

cryptoBinancecybersecurityNorth Koreastablecoins

Open a keyword to see other news on the same topic.

Related tickers and likely impact

BNB/USDT

▼ Likely negative

BNB

Relevance: low

MarketCrypto
ExchangeBinance
SectorExchange tokens
Market cap$92.9B
Close on 11/01/2026712.69
Change that session+1.24%
BNB/USDT price, forecasts and signals →

Impact is scored by AI from the headline and may be wrong. It is not investment advice.

Related news

  • Coinbase and Kraken Ramp Up Security After Massive Binance Hack

    Crypto exchanges including Coinbase and Kraken moved to strengthen security and called for faster information-sharing after a record hack of Binance worth $6.3 billion, which analysts attribute to North Korea. Binance halted withdrawals and said it will use company funds to cover losses, with initial findings pointing to a compromised engineer's laptop that gave an attacker access to a service container. Tether froze nearly $1.57 billion linked to Binance and Circle froze $800 million, while Binance said about $3 billion in assets is frozen so far. Binance expects withdrawals to resume within 48 hours of its Friday update.

    Yahoo Finance·▼ BNB/USDT▼ BTC/USDT▼ ETH/USDTcryptocybersecurityBinance
  • TRM and Chainalysis Tie $6.4B Binance Hack to North Korea's TraderTraitor

    TRM Labs and Chainalysis have both attributed the Binance hack to TraderTraitor, the North Korean group the FBI blamed for the $1.5 billion Bybit hack. TRM put the theft at about $6.36 billion, moved from Binance wallets on 10 blockchains mostly within about 20 minutes from 4:05 p.m. ET on Thursday, while Chainalysis put it at about $6.4 billion and saw stolen funds mixing with proceeds of the Bitget exploit. The attacker holds more than 420,000 ETH and 18,270 BTC, about $2.4 billion beyond any issuer's reach, while issuers including Tether and Circle have frozen about $2.67 billion in stablecoins. Binance has reserved more than $6.34 billion of company funds to cover losses, $5 billion of it already held in the stolen tokens.

    Decrypt·▼ BNB/USDT▼ BTC/USDTcryptoBinancecybersecurity
  • Binance Hacked for $6.36 Billion. What's Next for Crypto?

    Binance was hacked for about $6.36 billion, described as the largest crypto theft on record. Starting at 20:05 UTC on Thursday 29 October 2026, funds left its hot wallets across ten blockchains, most of them within about 20 minutes. The attackers prepared for at least 36 hours, withdrawing small amounts via Tornado Cash, then at 20:20 UTC pushed through 50 pre-signed withdrawal approvals, moving 167,464 ETH and 63 other assets, including 1.6 billion USDT. Binance first said a DevOps engineer's laptop was compromised, and co-CEO Richard Teng called it a “complex attack”; on Saturday 31 October, the FBI said North Korea was behind it, naming TraderTraitor, the unit it blamed for the $1.5 billion Bybit hack in February 2025. By 00:30 UTC on Friday, about $2.7 billion had been frozen.

    Yahoo Finance·▼ BNB/USDT▼ BTC/USDTBinancecryptocybersecurity
  • No proof of AI in North Korean hackers move of stolen Binance fundsCoinDesk·• BNB/USDTcryptoBinancecybersecurity
  • FBI Blames North Korea for $6B Binance Hack as Exchange Reopens Withdrawals

    The FBI said North Korea's TraderTraitor was behind the theft of more than $6 billion from Binance and published hundreds of linked addresses. Binance began restoring withdrawals on Sunday, processing $4.649 billion in withdrawals and $1.01 billion in deposits in the first nine and a half hours, a net outflow of about $3.64 billion, or 2.1% of the $171 billion in assets reported in its latest proof of reserves. The FBI said the hackers mainly converted stolen assets into Ethereum and were expected to launder funds through DeFi and instant swap services, urging businesses to block transactions tied to hundreds of Ethereum addresses, 19 Bitcoin addresses and one Solana address. Chainalysis said more than $500 million had moved through Tron, while CEO Richard Teng said Binance had replenished about 95% of affected assets and would absorb the financial impact. According to Reuters, Circle has frozen more than $1.1 billion in USDC.

    Decrypt·▼ BNB/USDT• BTC/USDTBinancecryptoNorth Korea
  • Binance sees $3.64 billion in net outflows as withdrawals resume after massive hack

    Binance reported $3.64 billion in net outflows after reopening withdrawals on Sunday, as customers rushed to move funds following a $6.3 billion hack. Between 6 a.m. and 3:30 p.m. UTC, the exchange processed $4.65 billion in withdrawals and $1.01 billion in deposits. The net outflows equaled 2.1% of its $171 billion in total assets, based on its latest proof-of-reserves data. Most of the outflows happened in the first couple of hours, and withdrawal volumes have since stabilized, with services restored in phases across 15 networks while testing continues for the rest. The FBI attributed the hack to North Korean hackers known as TraderTraitor, and Binance said it had covered about 95% of the lost funds and would absorb the losses rather than pass them on to users.

    CNBC·▼ BNB/USDT▼ BTC/USDT▼ ETH/USDTcryptoBinancecybersecurity

Related markets

Crypto →

Latest news

All news →

Get the briefing on Telegram or Zalo

Join the Upside Telegram channel or Zalo group for the Vietnam stocks and gold briefing at 8:00 and 19:00 (Vietnam time) on trading days, plus a weekly wrap on Saturday morning.