Overview
- Binance announced on Oct. 30 that roughly $6.3 billion in cryptocurrency was taken in a cyberattack, and the company has suspended deposits and withdrawals while investigators work to assess the full loss.
- Company investigators say attackers illegally obtained on‑chain transfer permissions, used pre‑signed transactions for rapid mass withdrawals, and deployed tools to erase activity logs that make tracing and forensics harder.
- Blockchain forensics firm TRM Labs has linked the patterns to North Korea’s TraderTraitor group and the FBI has reported DPRK involvement and warned other crypto firms to block transactions tied to the stolen addresses.
- Binance has frozen about $3 billion in assets, said it will cover customer losses using protection funds and company capital, and published updates including a video explanation from co‑CEO Richard Teng.
- The theft pushed crypto prices lower and is likely to intensify regulatory scrutiny of exchange security, developer workstation protections, hot/cold wallet controls, and cooperation with law enforcement.