Trending
    CryptoVery High

    TraderTraitor Drains $6.3 Billion From Binance Hot Wallets in Record Crypto Heist

    Section editor: ·Very High33 articles covering this·28 news sources·Updated an hour ago·World
    Share:
    Timeline infographic detailing the $6.3 billion Binance hack, wallet extraction across ten blockchains, and stablecoin freeze

    Why it matters

    The compromise of $6.3 billion across ten blockchains demonstrates that endpoint vulnerabilities in centralized signing infrastructure can trigger market liquidations exceeding $1.5 billion within minutes, regardless of exchange size.

    What happened (in 30 seconds)

    * The breach targeted signing systems directly, compromising a DevOps engineer's laptop to deploy unauthorized code and drain $6.3 billion in customer and operational assets across ten blockchains in roughly 20 minutes starting around 20:00 GMT on October 29, 2026. * Forensic attribution points to state-backed actors, with blockchain intelligence firms TRM Labs, Elliptic, and Chainalysis identifying North Korean-linked group TraderTraitor through tactics matching earlier operations, including the $1.5 billion Bybit theft in February 2025. * Stablecoin issuers executed rapid freezes, locking roughly $3 billion of the stolen funds within hours while Binance suspended withdrawals and committed its SAFU reserves to cover all remaining losses.

    The context you actually need

    * Hot wallet architecture creates structural vulnerability, requiring exchanges to maintain continuous online liquidity pools that depend on automated signing infrastructure rather than air-gapped storage. * Centralized asset issuers provide an emergency backstop, as Tether and Circle retain the protocol-level capability to blacklist addresses and freeze circulating tokens on public ledgers. * State actors leverage endpoint supply chains, bypassing hardened cryptographic primitives by targeting individual administrator devices with elevated deployment permissions.

    What's really happening

    The mechanics of the $6.3 billion Binance breach illustrate a fundamental mismatch between blockchain finality and centralized operational security. The attackers did not break the underlying cryptography of the ten targeted networks. Instead, they compromised the corporate perimeter by infiltrating a single DevOps engineer's device, turning standard administrative deployment privileges against the platform's signing infrastructure.

    Once inside the deployment pipeline, TraderTraitor rehearsed operations before pushing unauthorized code that granted automated signing authority. This enabled a coordinated sweep of hot wallets beginning at 20:00 GMT on October 29. By executing the primary extraction wave across ten independent blockchains in approximately 20 minutes, followed by a secondary wave, the attackers compressed the window required for human security intervention.

    The economic fallout was immediate. As funds moved, automated liquidations in derivative markets surpassed $1.5 billion. For operators in regional financial hubs such as Dubai—where the extraction began around 12:24 a.m. UAE time on October 30—the speed of the attack stripped trading desks of the ability to adjust collateral ratios or execute risk mitigation strategies before platforms suspended withdrawals.

    The subsequent intervention highlights the dual nature of modern digital asset architecture. While decentralized networks processed the fraudulent transactions without friction, centralized stablecoin issuers stepped in to freeze roughly $3 billion of the stolen proceeds. This containment mechanism prevents the attackers from easily converting dollar-pegged assets into unhosted liquidity, but it also underscores the degree to which market participants rely on discretionary corporate intervention to prevent systemic insolvency.

    Binance's commitment to absorb the losses through its Secure Asset Fund for Users (SAFU) and corporate reserves avoids immediate retail haircuts, yet it exposes the capital strain placed on exchange balance sheets. As North Korean actors increasingly deploy endpoint intrusions to fund state operations and bypass international sanctions, the cost of underwriting hot-wallet risk will force exchanges to overhaul custody infrastructure, restrict hot-wallet liquidity ratios, and impose stricter operational controls on administrative personnel.

    Who feels it first (and how)

    * Exchange-reliant trading desks: Sudden withdrawal suspensions lock capital, preventing balance-sheet rebalancing across secondary venues. * Derivatives market participants: Over $1.5 billion in cascading liquidations hit leveraged positions before exchange risk teams could intervene. * Corporate treasuries with centralized custody: Finance executives face elevated auditing requirements and pressure to transition hot-wallet balances to cold storage. * Regional crypto hubs: Operators in jurisdictions like Dubai absorb immediate volatility during late-night operational hours when response capacities are lower.

    What to watch next

    * SAFU reserve depletion: Monitor the verified balance of Binance's insurance reserves to gauge whether corporate balance sheets can absorb billions in non-recovered assets without operational cutbacks. * Withdrawal resumption timelines: Track the phased reactivation of platform withdrawals, which signals whether internal audits have neutralized secondary access points in the signing infrastructure. * Inter-jurisdictional enforcement requests: Watch regulatory actions, such as access restriction requests from the Philippine SEC, which determine whether global compliance friction intensifies around centralized operators.

    Known:

    TraderTraitor executed a $6.3 billion extraction across ten blockchains starting at 20:00 GMT on October 29; stablecoin issuers froze approximately $3 billion; liquidations topped $1.5 billion.

    Likely:

    Exchanges will reduce the proportion of assets held in hot wallets, raising settlement times and lowering instantaneous liquidity for high-volume traders.

    Unclear:

    How much of the remaining, non-frozen capital can be successfully laundered through privacy protocols before international law enforcement intervenes.

    Frequently Asked Questions

    Why it matters?
    The compromise of $6.3 billion across ten blockchains demonstrates that endpoint vulnerabilities in centralized signing infrastructure can trigger market liquidations exceeding $1.5 billion within minutes, regardless of exchange size.
    What happened (in 30 seconds)?
    The breach targeted signing systems directly, compromising a DevOps engineer's laptop to deploy unauthorized code and drain $6.3 billion in customer and operational assets across ten blockchains in roughly 20 minutes starting around 20:00 GMT on October 29, 2026. Forensic attribution points to state-backed actors, with blockchain intelligence firms TRM Labs, Elliptic, and Chainalysis identifying North Korean-linked group TraderTraitor through tactics matching earlier operations, including the $1
    What's really happening?
    The mechanics of the $6.3 billion Binance breach illustrate a fundamental mismatch between blockchain finality and centralized operational security. The attackers did not break the underlying cryptography of the ten targeted networks. Instead, they compromised the corporate perimeter by infiltrating a single DevOps engineer's device, turning standard administrative deployment privileges against the platform's signing infrastructure. Once inside the deployment pipeline, TraderTraitor rehearsed o
    Who feels it first (and how)?
    Exchange-reliant trading desks: Sudden withdrawal suspensions lock capital, preventing balance-sheet rebalancing across secondary venues. Derivatives market participants: Over $1.5 billion in cascading liquidations hit leveraged positions before exchange risk teams could intervene. Corporate treasuries with centralized custody: Finance executives face elevated auditing requirements and pressure to transition hot-wallet balances to cold storage. Regional crypto hubs: Operators in jurisdictions li
    What to watch next?
    SAFU reserve depletion: Monitor the verified balance of Binance's insurance reserves to gauge whether corporate balance sheets can absorb billions in non-recovered assets without operational cutbacks. Withdrawal resumption timelines: Track the phased reactivation of platform withdrawals, which signals whether internal audits have neutralized secondary access points in the signing infrastructure. Inter-jurisdictional enforcement requests: Watch regulatory actions, such as access restriction reque
    33 Articles
    New York Post

    How North Korea’s ruthless state sponsored hackers, main suspects in the $6.3B Binance heist, operate

    Suspected North Korean state-sponsored hackers, linked by blockchain intelligence firms to the TraderTraitor unit, are reported to have carried out a record $6.3 billion theft from Binance, the world's largest cryptocurrency exchange, prompting the e...

    The Washington Times

    What to know about the $6.3B hack on Binance, likely the biggest-ever crypto theft

    Binance, the world's largest cryptocurrency exchange, reported a security incident with an estimated total impact of about $6.3 billion, widely described as the largest crypto theft on record. Firms moved to freeze roughly $2 to $3 billion in related...

    10 hours ago
    Read Full Article
    The Guardian

    FBI working with Binance after crypto exchange hit by $6.3bn heist – business live

    Binance, the world's largest cryptocurrency exchange, suspended deposits and withdrawals after a security breach that it estimates affected about $6.3 billion in assets, which would make it the largest crypto heist on record. The FBI is working with ...

    10 hours ago
    Read Full Article
    Financial Times

    $6.3bn in 30 minutes: how the world’s biggest heist unfolded

    Binance, the world's largest cryptocurrency exchange, suspended deposits and withdrawals after a security breach that it estimates affected about $6.3 billion in assets, which would make it the largest crypto heist on record. Reports cite a compromis...

    11 hours ago
    Read Full Article
    BBC News

    Crypto giant Binance attempting to recover $6.3bn stolen in hack linked to North Korea

    Binance, the world's largest cryptocurrency exchange, has been hit by a security breach that industry reports estimate at about $6.3 billion in assets, which would make it the largest crypto heist on record. The exchange has halted withdrawals and sa...

    12 hours ago
    Read Full Article
    BBC News

    Crypto giant Binance attempting to recover $6.3bn stolen in hack linked to North Korea

    Binance, the world's largest cryptocurrency exchange, has been hit by a security breach that industry reports estimate at about $6.3 billion in assets, which would make it the largest crypto heist on record. The exchange has halted withdrawals and sa...

    12 hours ago
    Read Full Article
    The Guardian

    How crypto hacking funds isolated North Korea’s nuclear programme

    The Guardian reports that cryptocurrency theft is estimated to generate roughly half of North Korea's foreign currency income, with experts linking the record $6.3bn (£4.7bn) hack on the Binance exchange to TraderTraitor, an elite North Korean hackin...

    12 hours ago
    Read Full Article
    The Guardian

    How crypto hacking funds isolated North Korea’s nuclear programme

    North Korea is widely believed to be behind a record crypto theft from Binance, the world's largest cryptocurrency exchange, estimated at about $6.3 billion in assets; TRM Labs has attributed the incident to TraderTraitor, an elite North Korean hacki...

    12 hours ago
    Read Full Article
    Cointelegraph

    As it happened: Binance’s record $6.3B crypto hack

    Binance is at the center of a reported record hack estimated at roughly $6.3 billion in affected assets, with live coverage indicating about $2.54 to $3 billion frozen so far as investigators trace the stolen funds and the exchange pledges to cover c...

    13 hours ago
    Read Full Article
    Bloomberg Technology

    North Koreans Seen as Likely Hackers in Giant Binance Heist

    Binance, the world's largest cryptocurrency exchange, suspended all deposits and withdrawals while investigating a security incident that reporting estimates affected about $6.3 billion in assets, which would make it the largest crypto heist on recor...

    14 hours ago
    Read Full Article
    Bloomberg Technology

    North Koreans Seen as Likely Hackers in Giant Binance Heist

    Binance, the world's largest cryptocurrency exchange, suspended all deposits and withdrawals while investigating a security incident that reporting estimates affected about $6.3 billion in assets, which would make it the largest crypto heist on recor...

    14 hours ago
    Read Full Article
    The Guardian

    FBI working with Binance after crypto exchange hit by $6.3bn heist – business live

    Binance, the world's largest cryptocurrency exchange, was hit by a security breach affecting an estimated $6.3bn in assets, which would make it the largest crypto heist on record. Blockchain intelligence firm TRM attributed the theft to North Korea's...

    14 hours ago
    Read Full Article
    The Hill

    North Korea linked to $6.3B Binance hack

    Blockchain intelligence firms TRM Labs and Chainalysis have tied a $6.3 billion hack of the cryptocurrency exchange Binance, the largest crypto theft on record, to TraderTraitor, a North Korea-based hacking unit that has previously targeted the digit...

    14 hours ago
    Read Full Article
    France 24

    Biggest hack in history: Cryptocurrency giant Binance loses $6.3 billion

    Binance, the world's largest cryptocurrency exchange, has been hit by a security breach affecting an estimated $6.3 billion in assets, which would make it the largest crypto heist on record. The exchange said roughly $3 billion of the stolen funds ha...

    14 hours ago
    Read Full Article
    The Guardian

    How big a deal is the $6.3bn Binance crypto heist, who did it, and are investments safe?

    Binance, the world's largest cryptocurrency exchange, has been hit by a security breach estimated at about $6.3bn in assets, which would make it the largest crypto heist on record. Experts quoted by The Guardian identify North Korea as the likely cul...

    14 hours ago
    Read Full Article
    International Business Times

    Binance Hit By Record Crypto Hack. Investigators Are Pointing at North Korea.

    Binance, the world's largest cryptocurrency exchange, suspended all deposits and withdrawals after a security incident that reporting estimates drained roughly $6.3 billion in crypto assets, which would make it the largest crypto heist on record. Inv...

    15 hours ago
    Read Full Article
    TechSpot

    Binance loses $6.3 billion in largest crypto heist ever

    Binance, the world's largest cryptocurrency exchange, suspended all deposits and withdrawals after a security incident that TRM Labs estimates drained roughly $6.36 billion from its wallets across ten blockchains, mostly within about 20 minutes on Oc...

    15 hours ago
    Read Full Article
    TechCrunch

    North Korean hackers blamed for stealing record $6.3B in Binance breach

    North Korean-linked hackers are suspected of breaching Binance, the world's largest cryptocurrency exchange, in an incident that reporting estimates drained roughly $6.3 billion in crypto assets, which would make it the largest crypto heist on record...

    15 hours ago
    Read Full Article
    France 24

    How the record-breaking $6.3 billion heist in crypto history unfolded

    Binance, the world's largest cryptocurrency exchange, was hit by a security breach affecting an estimated $6.3 billion in assets, which would make it the largest crypto heist on record. Issuers have frozen roughly half of the stolen funds, with about...

    16 hours ago
    Read Full Article
    Ars Technica — All

    Hackers steal $6.3 billion from Binance in record crypto heist

    Binance, the world's largest cryptocurrency exchange, suspended all deposits and withdrawals while it investigates a security incident that reporting estimates affected about $6.3 billion in assets, which would make it the largest crypto heist on rec...

    16 hours ago
    Read Full Article
    Ars Technica

    Hackers steal $6.3 billion from Binance in record crypto heist

    Binance, the world's largest cryptocurrency exchange, suspended all deposits and withdrawals while it investigates a security incident that reporting estimates affected about $6.3 billion in assets, which would make it the largest crypto heist on rec...

    16 hours ago
    Read Full Article
    NPR

    Blockchain intelligence firms link North Korea to $6.3B hack on Binance

    Binance, the world's largest cryptocurrency exchange, is investigating a security breach that industry reports estimate at about $6.3 billion in assets, which would be the largest crypto heist on record. Blockchain intelligence firms have linked the ...

    16 hours ago
    Read Full Article
    Al Jazeera

    Binance says $6.3bn stolen in biggest crypto heist in history: What we know

    Binance, the world's largest cryptocurrency exchange, has halted withdrawals after a security breach affecting an estimated $6.3 billion in assets, which would make it the largest crypto heist on record. Blockchain intelligence firms have linked the ...

    17 hours ago
    Read Full Article
    Al Jazeera

    Binance says $6.3bn stolen in biggest crypto heist in history: What we know

    Binance, the world's largest cryptocurrency exchange, has halted withdrawals after a security breach affecting an estimated $6.3 billion in assets, which would make it the largest crypto heist on record. Blockchain intelligence firms have linked the ...

    17 hours ago
    Read Full Article
    TechRadar

    Binance hit by 'largest crypto theft on record' as North Korean hackers steal $6.3bn in just 20 minutes

    Binance, the world's largest cryptocurrency exchange, suspended all deposits and withdrawals while it investigates a security incident that reporting estimates affected about $6.3 billion in assets, which would make it the largest crypto heist on rec...

    17 hours ago
    Read Full Article
    The New York Times

    Binance Suspends Withdrawals After Crypto Hackers Steal $6.3 Billion

    Binance, the world's largest cryptocurrency exchange, suspended deposits and withdrawals after a security breach that it estimates affected about $6.3 billion in assets, which would make it the largest crypto heist on record. Founder Changpeng Zhao s...

    17 hours ago
    Read Full Article
    The New York Times - Technology

    Binance Suspends Withdrawals After Crypto Hackers Steal $6.3 Billion

    Binance, the world's largest cryptocurrency exchange, suspended deposits and withdrawals after a security breach that it estimates affected about $6.3 billion in assets, which would make it the largest crypto heist on record. Founder Changpeng Zhao s...

    17 hours ago
    Read Full Article
    NYT — Technology

    Binance Suspends Withdrawals After Crypto Hackers Steal $6.3 Billion

    Binance, the world's largest cryptocurrency exchange, suspended deposits and withdrawals after a security breach that it estimates affected about $6.3 billion in assets, which would make it the largest crypto heist on record. Founder Changpeng Zhao s...

    17 hours ago
    Read Full Article
    The Wall Street Journal

    Clues Point to Familiar Culprit in Massive Binance Crypto Heist: North Korea

    Binance, the world's largest cryptocurrency exchange, suspended deposits and withdrawals after a security breach that it estimates affected about $6.3 billion in assets, which would make it the largest crypto heist on record. Reports cite a compromis...

    17 hours ago
    Read Full Article
    WIRED

    The $6.3 Billion Binance Hack Was Pulled Off in Just 20 Minutes

    Binance, the world's largest crypto exchange, has been hit by a security incident that multiple crypto-tracing firms say may be the work of North Korean hackers linked to TraderTraitor, with an estimated $6.3 billion in assets affected in a breach th...

    18 hours ago
    Read Full Article
    The Guardian

    Tell us: have you been affected by the Binance hack?

    Binance, the world's largest cryptocurrency exchange, has been hit by a security breach that industry reports estimate at about $6.3bn (£4.7bn) in assets, which would make it the largest crypto heist on record. The exchange has frozen roughly $3bn in...

    18 hours ago
    Read Full Article
    Silicon Republic

    $6.3bn hacked from Binance in ‘largest’ crypto attack

    Binance, the world's largest cryptocurrency exchange, has disclosed that roughly $6.3 billion in crypto funds were stolen in what is believed to be the largest crypto hack on record, after suspending deposits and withdrawals to investigate a security...

    20 hours ago
    Read Full Article
    BBC News

    Crypto giant Binance hit by $6.3bn hack suspected to be largest in history

    Crypto exchange Binance has been hit by a security breach affecting an estimated $6.3 billion in assets, which would make it the largest cryptocurrency heist on record, according to BBC News. Two analytics firms have attributed the incident to a Nort...

    BBC News

    Crypto giant Binance hit by $6.3bn hack suspected to be largest in history

    Crypto exchange Binance has been hit by a security breach affecting an estimated $6.3 billion in assets, which would make it the largest cryptocurrency heist on record, according to BBC News. Two analytics firms have attributed the incident to a Nort...

    Bitcoin.com

    Binance Hack Pinned on North Korea’s Lazarus Group by TRM Labs and ZachXBT

    Binance is at the center of a reported multibillion-dollar hack, with figures cited across coverage ranging from $5.8 billion to $6.3 billion in stolen assets. Investigators TRM Labs and blockchain researcher ZachXBT have pinned the attack on North K...

    Crypto News

    BREAKING: Lazarus Group suspected in $6.3 billion Binance hack

    Investigators suspect North Korea's Lazarus Group in a $6.3 billion hack affecting Binance, with blockchain firm Blockaid tracing the wallet breach while issuers freeze stolen assets. Binance has reported roughly $3 billion frozen so far, with live c...

    Emirates 24|7

    World's biggest crypto hack? Binance hit by record $6.3bn crypto heist as hackers drain funds in minutes

    Binance, the world's largest cryptocurrency exchange, was hit by a hack that analysts describe as the biggest crypto theft on record, with about $6.3 billion in assets reportedly drained in minutes. Binance froze deposits and withdrawals while invest...

    Cointelegraph

    North Korea’s TraderTraitor linked to $6.3B Binance hack

    North Korea's TraderTraitor has been linked, with high confidence according to TRM Labs, to a record hack of roughly $6.3 billion affecting Binance, while ZachXBT identified stolen funds from the Binance and Bitget hacks converging at the same addres...

    Fortune

    The $6.3 billion Binance hack: What we know so far about the biggest crypto heist in history [Updated]

    Binance, the world's largest cryptocurrency exchange, suspended deposits and withdrawals after a security breach that it estimates affected about $6.3 billion in assets, which would make it the largest crypto heist on record. Reports cite a compromis...

    Techmeme

    TRM Labs attributes the Binance hack to North Korea-based TraderTraitor, which drained ~$6.36B from Binance wallets across 10 blockchains, mostly in ~20 minutes (Tom Westbrook/Reuters)

    TRM Labs has attributed the hack of cryptocurrency exchange Binance to North Korea-based group TraderTraitor, which drained roughly $6.36 billion from Binance wallets across 10 blockchains, mostly within about 20 minutes. Binance earlier said it was ...

    HuffPost

    North Korea Suspected In Shocking $6 Billion Crypto Heist

    North Korea is suspected of carrying out a record $6.3 billion crypto theft from Binance, the world's largest cryptocurrency exchange. The company's initial investigation suggested a compromised laptop may have been involved, but a subsequent review ...

    Al Jazeera

    Binance says $3bn in crypto funds frozen amid ‘potential security issue’

    Binance, the world's largest cryptocurrency exchange, said about $3 billion in crypto funds have been frozen amid a potential security issue, with its founder stating the exchange appears to have been hacked, according to Al Jazeera.

    Al Jazeera

    Binance says $6.3bn stolen in biggest crypto heist in history

    Binance said it was hit by a security breach affecting an estimated $6.3 billion in assets, which would make it the largest cryptocurrency heist on record. A blockchain intelligence firm has attributed the attack to North Korean state-sponsored hacke...