Federal investigators say North Korean hackers stole billions in cryptocurrency from Binance, triggering an international effort to trace stolen assets and protect customers.
LAS VEGAS (Las Vegas News) — The FBI has attributed the theft of more than $6 billion in cryptocurrency from Binance to North Korean state-linked hackers, identifying the operation as TraderTraitor and warning financial service providers that the stolen assets are being moved through digital financial networks.
The Oct. 29, 2026, attack involved approximately $6.3 billion in stolen cryptocurrency, according to subsequent reporting on the exchange’s response. The incident has prompted an international effort involving federal investigators, cryptocurrency companies and blockchain analysts.
The FBI publicly attributed the theft to North Korea in an Oct. 31 cybersecurity announcement. Investigators said the operation involved North Korean malicious cyber activity known as TraderTraitor.
Figures reflect the FBI’s October 31 announcement and Binance’s reported response as of that date. Replacement funds are not necessarily recovered stolen assets.
FBI Identifies North Korean Hacking Operation
The FBI said North Korea was responsible for stealing more than $6 billion in virtual assets from cryptocurrency exchange Binance on or about October 29.
Federal investigators identified the activity as TraderTraitor, a North Korean cyber operation associated with cryptocurrency theft. The bureau said the attackers were converting stolen assets primarily into Ether, the cryptocurrency associated with the Ethereum blockchain.
Authorities expect additional attempts to launder the stolen funds through decentralized finance platforms and instant cryptocurrency exchange services.
The FBI, U.S. Secret Service and IRS Criminal Investigation urged cryptocurrency exchanges, blockchain analytics companies and other virtual asset service providers to identify and block transactions involving addresses linked to the stolen funds.
Timeline of the Binance Cyberattack
Binance experiences a major cryptocurrency theft. Federal investigators later estimate that more than $6 billion in virtual assets were stolen.
The FBI publishes its attribution to North Korea’s TraderTraitor operation and identifies cryptocurrency addresses connected to the stolen assets.
Reuters reports that Binance says it has replaced approximately $6 billion of the stolen assets using company resources.
The incident remains under investigation, with authorities continuing efforts to trace and disrupt transactions associated with the theft.
How the Attack Was Carried Out
Binance described the breach as a complex cyberattack involving a compromised laptop and malicious software designed to remove evidence, according to Reuters.
The reported intrusion highlights the risks posed by compromised workplace devices and privileged access to financial systems. Attackers who gain access to trusted internal systems may be able to bypass safeguards that would otherwise protect digital assets.
The FBI’s public announcement focuses on attribution and the movement of stolen funds. It does not provide a comprehensive public reconstruction of every technical step used in the intrusion.
Binance Says It Has Replaced Billions in Assets
Binance said it had replaced approximately $6 billion of the roughly $6.3 billion stolen, using company funds to purchase replacement cryptocurrency, according to Reuters reporting published October 31.
The exchange said remaining losses involved less-liquid assets that could take longer to replace. Binance also reported working with industry partners to identify and freeze assets connected to the theft.
The company’s response drew on financial resources including its Secure Asset Fund for Users, its Futures Insurance Fund and corporate treasury funds.
Why the Attack Matters to Nevada Residents
Although federal authorities have not identified a direct Nevada connection to the Binance theft, the incident raises broader questions about cryptocurrency security for investors and businesses throughout the United States.
Digital asset exchanges can hold substantial amounts of customer funds. Security breaches may affect confidence in those platforms and raise questions about withdrawals, financial reserves and the availability of customer assets.
For Nevada cryptocurrency users, the incident underscores the importance of understanding how exchanges protect customer accounts and what safeguards may be available after a security incident.
Businesses employing remote technology workers also face cybersecurity risks involving compromised devices, malicious downloads and unauthorized access to internal financial systems.
No evidence reviewed for this report establishes that Nevada residents suffered direct losses from this particular attack.
How Cryptocurrency Users Can Protect Their Accounts
Cybersecurity experts generally recommend several precautions when using cryptocurrency exchanges and other digital financial services.
- Verify security announcements. Check the exchange’s official website or application rather than relying on unsolicited messages.
- Use strong authentication. Enable phishing-resistant multifactor authentication where supported.
- Monitor account activity. Review withdrawals, login notifications and account-security changes.
- Protect private keys. Never share recovery phrases, private keys or authentication codes with someone claiming to represent an exchange.
- Beware of recovery scams. Criminals may impersonate support representatives and claim customers must urgently transfer funds.
Anyone with information about the attack or suspected cryptocurrency-related cybercrime can contact the FBI Internet Crime Complaint Center.
Federal Investigation Continues
The FBI has published cryptocurrency addresses it says are holding, or previously held, assets connected to the theft. The bureau is asking financial service providers to help prevent further movement of those funds.
The case highlights the international challenges associated with investigating cryptocurrency theft, particularly when stolen assets move across multiple blockchain networks and financial services.
Federal investigators have not established a final recovery total in the October 31 public announcement. Further statements from law enforcement, Binance and blockchain investigators may clarify the extent of the intrusion and the amount ultimately recovered.
- Federal Bureau of Investigation. North Korea Responsible for $6 Billion+ Binance Attack . October 31, 2026.
- Reuters. Binance says it has covered $6 billion of $6.3 billion stolen in hack . October 31, 2026.
- FBI Internet Crime Complaint Center. Official cybercrime reporting portal .
Reporting note: This article distinguishes federal law enforcement findings from statements made by Binance. Financial figures reflect publicly reported estimates and may change as investigators trace additional transactions. No direct Nevada connection has been established.
