The biggest cryptocurrency theft ever recorded just became a national-security story.
Hackers drained an estimated $6.3 billion from Binance, the world's largest crypto exchange, in a lightning-fast operation that blockchain
investigators have tied to North Korea's elite TraderTraitor unit.
Now the FBI and U.S. Secret Service are working with Binance as investigators race to trace billions of dollars moving across multiple blockchains.
Binance's first public alert confirmed that its security team was urgently investigating a potential breach:
Our teams are aware of reports of a potential security issue and are actively investigating. At this stage, we have not confirmed any impact to user funds.
— Binance (@binance) October 29, 2026
Our security teams are reviewing all relevant information with urgency, and we will provide updates through official… pic.twitter.com/dN76yhzYM0
The scale is almost difficult to process.
TRM Labs says roughly $6.36 billion left Binance wallets across ten blockchains on October 29, with most of the money moving in about 20 minutes. The firm attributes the operation to TraderTraitor with high confidence based on its on-chain and off-chain intelligence.
TRM estimates North Korea has stolen approximately $12.8 billion in cryptocurrency across 100 incidents since 2017. About $7.4 billion of that total came in 2026 alone, giving the regime an estimated 85 percent share of all value stolen in crypto hacks this year.
The thieves prepared for at least 36 hours before the main attack. TRM says small Tornado Cash withdrawals funded an operator wallet before the billions began moving.
Investigators saw the same preparation pattern in earlier attacks linked to North Korea.
Ethereum accounted for the largest share of the outflow, followed by Bitcoin, Tron, the XRP Ledger and Solana. The attack also reached Arbitrum, Avalanche, Optimism, Base and Polygon.
Binance founder Changpeng Zhao, who no longer manages the exchange, quickly acknowledged that the incident looked like a hack and said users should be made whole:
User funds are safe!
— CZ 🔶 BNB (@cz_binance) October 29, 2026
It does look like a hack on Binance. Appreciate the quick freeze from Tether (~1m) and Circle (~3m).
I don't manage Binance (.com) anymore, but as a shareholder, I expect all user funds will be fully covered. https://t.co/oufpyNChxI
Industry partners moved fast enough to freeze a substantial share of the stolen assets, but the numbers remain enormous.
TRM calculates that stablecoin issuers and the Arbitrum Security Council froze nearly $2.7 billion. Binance later put the verified frozen total at around $3 billion while its teams continued tracing the rest with law enforcement and blockchain specialists.
The attacker still controls an estimated $2.4 billion in assets that have no central issuer capable of freezing them. Those funds can be moved, converted and laundered across a sprawling web of addresses while investigators watch the trail unfold in real time.
The Associated Press reports that Binance has reserved more than $6.34 billion in company funds to cover the stolen assets and has begun recovering money for users. Deposits were not affected, while withdrawals were suspended during security checks.
The company's initial review pointed to a compromised engineer's laptop, but the investigation later uncovered additional points of breach. Binance has not publicly named the attackers and says it is working with law enforcement to confirm who was responsible.
Private blockchain-intelligence firms with extensive visibility into the transactions currently identify North Korea as the likely culprit. No U.S. government agency has formally blamed Pyongyang for this specific theft yet.
President Trump told reporters that U.S. officials were investigating. Asked whether North Korea was behind the operation, he said, "We're looking at that."
Both the FBI and U.S. Secret Service are working with Binance following the record theft. American federal agencies are now helping track assets potentially stolen by a hostile foreign regime.
Binance co-CEO Richard Teng delivered a direct video update as the response intensified:
An update on the security incident. pic.twitter.com/qn2804fO5z
— Richard Teng (@_RichardTeng) October 30, 2026
The North Korean connection is not some wild theory pulled from a crypto chatroom.
The FBI formally blamed TraderTraitor for the $1.5 billion Bybit theft in February 2025. The Bureau warned that the North Korean actors rapidly converted stolen assets, spread them across thousands of blockchain addresses and worked to turn the proceeds into usable currency.
Federal investigators urged exchanges, bridges, analytics firms, decentralized-finance services and other virtual-asset companies to block transactions tied to the listed laundering addresses. The alert showed how the government and private industry can coordinate once investigators identify the digital trail.
The FBI had also tied TraderTraitor to a $308 million theft from Japan's DMM Bitcoin. In that case, a North Korean operative allegedly posed as a recruiter and sent a malicious coding test to an employee at a cryptocurrency wallet company, gaining access that was later used to manipulate a legitimate transaction request.
The Bybit heist was the previous record-holder. The Binance theft is about four times larger.
The stolen money can become fuel for a heavily sanctioned regime.
North Korea has spent years using cyber theft to obtain foreign currency under heavy international sanctions. American officials have repeatedly warned that the regime's cryptocurrency operations help finance the government and its weapons programs.
The methods are disturbingly human. Investigators say North Korean operators target the people who control digital keys, often using fake jobs, recruiters, compromised laptops and social engineering to get inside organizations before the money moves.
One successful deception can open the door to billions.
Blockchain technology gives investigators a public trail to follow, and the rapid freeze of roughly $3 billion proves that coordinated action can still hurt the thieves. But the attack also exposes how quickly hostile-state operators can exploit weak points surrounding the technology.
Binance says user funds are safe and that the company will cover confirmed losses. Customers will judge that promise by how fully and quickly the exchange restores access, explains the breach and proves the reserves are there.
For the United States, the larger challenge is already clear.
A hostile regime may have pulled off the largest crypto heist in history in roughly the time it takes to watch a sitcom. Federal investigators and private analysts are now in a global race to freeze what they can before the rest disappears into North Korea's shadow financial network.
This was not a warning shot. It was a $6.3 billion robbery.
This is a Guest Post from our friends over at WLTReport. View the original article here.
The post JUST IN: FBI Joins Hunt After North Korea-Linked Hackers Pull Off Largest Crypto Heist In History appeared first on 100PercentFedUp.com.
Source link
