Binance resumes phased withdrawals after $6.3B theft attributed by FBI to North Korea's TraderTraitor
Binance announced on 1 November 2026 that it is resuming withdrawals in phases, after freezing deposits and withdrawals following the theft of $6.3 billion in crypto from its wallets. The exchange says it has covered 95% of the stolen assets and is still sourcing the remaining, less liquid ones. It also states that it will absorb the losses and not pass them on to users. On 31 October the FBI attributed the breach to the North Korean group TraderTraitor, which is converting the proceeds mainly into Ethereum, with further laundering expected. Binance had earlier blamed North Korean hackers and plans to publish a detailed incident report once its investigation is complete.
Detalhes técnicos
- The article does not describe the intrusion vector or the technical method of compromise.
- The FBI says TraderTraitor is converting the stolen assets primarily into Ethereum and that further laundering is likely.
- Network status on 1 November showed mixed states: Bitcoin withdrawals and deposits partially suspended, Ethereum deposits normal and withdrawals partially suspended.
- Users should expect delays and longer processing times due to traffic volume.
Remediação
- Binance froze deposits and withdrawals to contain losses, assess impact, restore services and complete security checks.
- It is restoring withdrawals in phases by network and asset type, and says it is strengthening safeguards and completing recovery.
- A full incident report is promised after the investigation ends.
Linha do tempo
-
Binance resumes phased withdrawals after $6.3B theft attributed by FBI to North Korea's TraderTraitor
ler a análise desta fonte ocultar
Binance announced on 1 November 2026 that it is resuming withdrawals in phases, after freezing deposits and withdrawals following the theft of $6.3 billion in crypto from its wallets. The exchange says it has covered 95% of the stolen assets and is still sourcing the remaining, less liquid ones. It also states that it will absorb the losses and not pass them on to users. On 31 October the FBI attributed the breach to the North Korean group TraderTraitor, which is converting the proceeds mainly into Ethereum, with further laundering expected. Binance had earlier blamed North Korean hackers and plans to publish a detailed incident report once its investigation is complete.
Technical Details
- The article does not describe the intrusion vector or the technical method of compromise.
- The FBI says TraderTraitor is converting the stolen assets primarily into Ethereum and that further laundering is likely.
- Network status on 1 November showed mixed states: Bitcoin withdrawals and deposits partially suspended, Ethereum deposits normal and withdrawals partially suspended.
- Users should expect delays and longer processing times due to traffic volume.
Remediation
- Binance froze deposits and withdrawals to contain losses, assess impact, restore services and complete security checks.
- It is restoring withdrawals in phases by network and asset type, and says it is strengthening safeguards and completing recovery.
- A full incident report is promised after the investigation ends.