Short answer: The FBI has linked North Korea's TraderTraitor to a $6.43 billion theft from Binance. Users should monitor their accounts and enable two-factor authentication.
TL;DR
- North Korea's TraderTraitor stole $6.43 billion from Binance.
- The stolen assets were converted mainly into Ethereum.
- The attackers are using DeFi and instant swap services to launder the funds.
- Binance is resuming withdrawals in phases.
- Tether, Circle, Ripple, Arbitrum, and Optimism have frozen $2.85 billion.
What happened with FBI?
TraderTraitor is a North Korean hacking group that targeted Binance, stealing $6.43 billion in crypto assets. They converted the stolen funds into Ethereum and are using DeFi services to launder them. Binance is resuming withdrawals in phases, and some funds have been frozen by major cryptocurrency exchanges.
Key facts
| Reported by | The Hacker News |
|---|---|
| Date reported | 01 Nov 2026 |
How it works
They tricked victims into downloading malicious software and then moved the stolen funds.
- Stole cryptocurrency
- Converted to Ethereum
- Used DeFi services
- Frozen by financial firms
Timeline
| Date | Event | Source |
|---|---|---|
| 2026-11-01 | Reported by The Hacker News | The Hacker News |
| 2026-11-01 | This Skillmate explainer published | Skillmate |
How to fix it
- Keep the operating system, browser and security software updated.
- Do not open unexpected attachments or install software from unofficial sources.
- Report suspicious files or pop-ups to your IT or security team.
How to detect it
Defenders should look for unusual blockchain transactions, unexpected cryptocurrency transfers, and suspicious wallet addresses.
What is confirmed
- Reported by The Hacker News
Why it matters
This attack is the largest in crypto history, costing Binance $6.43 billion. It shows how serious the threat from North Korean hackers is and why companies must improve their security.
Learn the skills behind this story
Want to understand attacks like this and defend against them? Join Skillmate cybersecurity training or practise hands-on in Skillmate Labs.
FAQ
What is TraderTraitor?
TraderTraitor is a group linked to North Korea that steals cryptocurrency through malware and social engineering.
How much was stolen?
The heist amounted to over $6 billion, making it the largest cryptocurrency theft in history.
Where did the stolen funds go?
The stolen assets were converted into Ethereum and then laundered using decentralized finance (DeFi) and swap services.
What measures did Binance take?
Binance resumed phase one of withdrawals and is verifying the readiness of affected services.
Related Skillmate posts
Sources
- FBI Links North Korea's TraderTraitor to Record $6.43 Billion Binance Crypto Heist (The Hacker News)
How we wrote this: facts come from the sources above. An on-prem AI model drafted the plain-English parts and every sentence was checked against the sources; unsupported sentences were removed. MITRE mapping is our own judgement.
