Overview
- On Oct. 29 hackers moved roughly $6.3–6.36 billion out of Binance across about 10 blockchains in around 20 minutes, converting large sums quickly to evade detection.
- The FBI attributed the theft to a DPRK‑linked group called TraderTraitor and published hundreds of wallet addresses while warning the attackers are converting funds primarily into Ethereum for further laundering.
- Binance said it has replaced about 95% of the affected assets from company reserves and has begun phased restorations of withdrawals for major tokens.
- Law enforcement and private firms have traced and helped freeze roughly $2.7–3.0 billion so far, and investigations are focusing on a compromised DevOps laptop and abuse of hot‑wallet signing processes.
- The attack fits a pattern of large state‑linked crypto thefts and highlights recurring vulnerabilities in employee device security and transaction‑signing infrastructure, a point likely to drive tougher industry controls and law enforcement cooperation.