Binance hackers spent months planning record $6.3 billion cryptocurrency theft
Binance, the world's largest cryptocurrency exchange, suffered a security breach on October 29, 2026, resulting in the theft of approximately 6.3 billion dollars worth of digital assets. Investigation revealed that hackers, believed by US authorities and blockchain analysts to be North Korean state-sponsored actors known as TraderTraitor, spent months preparing the attack. The breach began as early as June 2026, using fake job interviews to social engineer a Binance engineer, deploying malicious software, and exploiting the platform's internal artificial intelligence tool. The actual theft took roughly 20 minutes to execute. Binance froze some deposits and withdrawals, and worked with other cryptocurrency companies to freeze about 3 billion dollars in stolen stablecoins. The exchange pledged to absorb all financial losses and restored 98 percent of affected customer funds by early November using its own balance sheet reserves.
Key facts
- On October 29, 2026, approximately $6.3 billion in cryptocurrency was stolen from Binance in roughly 20 minutes
- Blockchain intelligence firms TRM Labs and Elliptic attributed the attack to North Korean state-sponsored hackers known as TraderTraitor
- Hackers spent months planning the breach starting in June 2026, using fake job interviews and malicious code to compromise a Binance engineer's laptop
- Approximately $3 billion in stolen stablecoins were frozen by cryptocurrency issuers including Tether and Circle
- Binance replenished 98 percent of affected customer assets using its own company reserves by November 3, 2026
- The heist surpassed the previous record of $1.5 billion stolen from Bybit in February 2025, also attributed to the same North Korean group
How different outlets framed it
Left-leaning coverage: Progressive critics highlighted the hack as evidence of regulatory failure, arguing that crypto exchanges operating largely outside banking regulations expose billions in customer funds to sophisticated state-sponsored theft. Left-leaning outlets stressed concerns about crypto's broader systemic risks and called for stronger government oversight and consumer protections similar to those required of traditional financial institutions.
Right-leaning coverage: Right-leaning and crypto-friendly outlets highlighted Binance's swift action to cover all losses, demonstrated the exchange's financial strength, and framed the attack as a sophisticated foreign threat requiring stronger cybersecurity rather than increased regulation. Some emphasized the lack of disruption to broader financial markets and the resilience of crypto infrastructure.
Limits of this briefing
Some technical details continue to emerge as Binance's investigation is ongoing. North Korea has denied responsibility for the hack, though US law enforcement and independent blockchain analysts have attributed it to North Korean actors with high confidence. The total long-term financial impact remains partially uncertain due to ongoing asset recovery efforts.
Sources
- NBC News: Binance pledges to cover billions in stolen assets after hack Centre
- CNN: Hackers just stole $6 billion in crypto. It's not the first time, and it won't be the last Left
- NPR: How Binance suffered a $6.3 billion cyber heist Centre
- Bloomberg: Binance Suspends Deposits, Withdrawals After $6.3 Billion Hack Shakes Industry Centre
- CNBC: Binance co-CEO Richard Teng says hackers used fake job interviews, AI tool to steal $6.3 billion in crypto Centre