The FBI reveals that North Korea orchestrated the record $6.3 billion digital currency hack against the Binance exchange.
The United States Federal Bureau of Investigation (FBI) has officially announced that the government of North Korea is directly responsible for the massive cyberattack and digital currency theft that drained more than 6.3 billion dollars from the global cryptocurrency exchange platform, Binance.
The startling security discovery drew global attention to international cybercrime, showing how state-sponsored hackers can break into major financial systems worldwide.
The massive security breach occurred around October 29, 2026, when cybercriminals broke through digital security walls and moved billions of dollars in virtual money from customer wallets across 10 different blockchains.
According to intelligence findings released by American law enforcement authorities, the criminal operation was executed by a notorious North Korean-linked hacking unit known as TraderTraitor, which cybersecurity investigators believe operates as part of the wider Lazarus Group.
Following the discovery of the digital robbery, FBI investigators observed that the malicious actors started converting the stolen digital assets into Ethereum and moving them through decentralised finance networks to hide where the money came from.
To stop the thieves from successfully cashing out the stolen funds, the American security agency issued urgent warnings to digital currency companies and private platforms across the global financial sector.
Releasing an official warning to block the stolen funds, the FBI stated:
“to block transactions with or derived from addresses TraderTraitor actors are using to launder these stolen assets.”
Company executives at Binance moved quickly to contain the financial damage and restore calm to worried investors.
Management announced that the platform has successfully set aside more than $6.34 billion from company reserves to cover all losses so that ordinary account holders do not lose their personal savings.
Detailing the company’s commitment to protecting customers and replacing missing funds, Binance management stated on social media:
“Our commitment remains the same: Binance will fully cover the financial impact of the funds stolen in this incident.”
The company added that it used its own funds to buy replacement tokens, covering 90 percent of the stolen assets, while working to source the remaining portion. Following safety checks, Binance announced the gradual reopening of user withdrawals.
Explaining the careful process of bringing the system back online, the exchange noted:
“We are taking a phased approach by prioritizing tokens based on the past week’s data of user demand, so that each network and asset pair can be restored carefully, with stability and security checks completed before access is reopened.”
Global security experts point out that North Korea relies heavily on digital heists to generate funds for its isolated government under heavy international sanctions.
Investigations into the hacked wallets remain active as international police agencies collaborate to track down the remaining funds.
Jennifer Baba is a journalist, international news correspondent, and writer at Moderncrux, where she covers artificial intelligence, fintech, emerging technologies, global politics, and international affairs. Based in Nigeria, she is passionate about transforming complex global developments into clear, engaging stories that inform and inspire readers.
