Overview
- The breach, discovered late Thursday, forced Binance to halt withdrawals and triggered the largest reported crypto theft on record of about $6.3 billion.
- The FBI publicly linked the attack to the North Korea-associated hacking unit TraderTraitor and said members primarily convert stolen tokens into Ethereum before moving them into DeFi and instant-swap services.
- Binance says it has recovered roughly 90% of the stolen funds using corporate reserves and insurance and has begun phased reopenings of withdrawals while promising to reimburse affected users.
- Large customer withdrawals followed the outage, with data reported by the Financial Times showing about $4.9 billion withdrawn from the exchange on Monday morning, a sign of early user flight and market stress.
- North Korea has long denied state-backed cyber thefts, the attribution leaves diplomatic and enforcement choices unresolved, and the FBI warning about DeFi laundering signals that tracing and seizing the remaining funds will be technically and legally difficult.