FBI Attributes Binance Heist of $6.3 Billion to North Korea
Seven Lights

The Federal Bureau of Investigation has attributed the theft of $6.3 billion in digital assets from the cryptocurrency exchange Binance to North Korea, Bloomberg reported, confirming the suspicion that has hung over the largest cyber heist on record since it began.
Blockchain intelligence firms had already linked the theft to North Korea’s elite hacking unit, NPR reported, and the Guardian reported that North Korea was the likely culprit, with about $3 billion of the stolen assets located so far. Binance said on Thursday that $6.3 billion of digital assets had been affected, the biggest crypto hack believed in history.
The exchange suspended deposits and withdrawals “as a precaution” while its security teams checked systems, secured wallet infrastructure and traced affected assets, and said it would cover every customer loss, setting aside $6.34 billion against the stolen assets. When normal transactions resumed, customers moved quickly for the exits: Binance reported $3.64 billion in outflows, the New York Times said. Bitcoin fell 5 percent within hours of news of the hack breaking in early Asian trading.
The Times reported that the attack marked a dangerous turn for the industry, with attackers increasingly using artificial intelligence and other advanced techniques to steal crypto and launder the funds rapidly. The Wall Street Journal, citing people familiar with the episode, said hackers had made off with at least $6.3 billion in 20 minutes. Binance’s founder, Changpeng Zhao, had warned a week earlier that “no crypto wallet is 100% safe.”
Binance, the world’s largest crypto exchange, was founded by Mr Zhao, a Chinese-born entrepreneur now a Canadian and Emirati citizen, who was jailed for four months in 2024 after pleading guilty to money-laundering violations and was pardoned by President Trump in 2025.
The bureau’s attribution sharpens the diplomatic dimension of the loss, which rivals any state-sponsored theft on record. Binance said its tracing efforts continued with law enforcement and industry partners, and that the suspended-asset figure could change as the investigation proceeded.
Update, November 2: Binance recorded $3.64 billion in net outflows after reopening withdrawals on Sunday, processing $4.65 billion in withdrawals against $1.01 billion in deposits between 6 a.m. and 3:30 p.m. UTC on November 1, CNBC reported. The net movement equalled 2.1 percent of the exchange’s $171 billion in total assets, based on its proof-of-reserves data of October 28. Binance said it had covered about 95 percent of the impacted amount and that withdrawals were stabilising after an initial spike. The founder, Changpeng Zhao, said most outflows came within the first hours, writing on X that “98% choose to stay!” and that “Trust isn’t earned by what you say in good times. It’s earned by what you do in hard times.” Bloomberg reported that North Korea’s hackers are supercharging crypto heists with artificial-intelligence skills.