Binance Discloses 57 Blocked North Korea-Linked Threats Following $6.34 Billion Breach by TraderTraitor
What happened
Binance blocked 57 suspected North Korea-linked intrusion attempts across 2026 before an October 29 breach orchestrated by the TraderTraitor group extracted $6.34 billion in digital assets.
The Context
- Sophisticated social engineering breached defenses: Attackers leveraged fake job interviews and internal AI tool manipulation to compromise an engineer after dozens of prior attempts involving tampered software were repelled.
- Capital buffers contained the immediate fallout: Binance intercepted $2.85 billion during the breach, absorbed the losses directly onto its balance sheet, and has already replenished 98% of impacted user tokens.
- State-sponsored cyber revenue operations are expanding: Investigations by the FBI, TRM Labs, Chainalysis, and Elliptic attribute the campaign to North Korean actors working to bypass global sanctions to fund military development.
The Number
— the count of thwarted intrusion attempts targeting Binance infrastructure throughout 2026 alone, proving that top-tier exchanges operate under persistent, continuous perimeter probing by well-funded adversaries.
Takeaway
As central exchanges absorb enterprise losses onto their balance sheets, institutions will likely accelerate transitions toward verifiable on-chain custody and audited cold-storage architecture.
UK and international business news, economics, and corporate coverage.
"The Guardian’s business section covers finance and markets with a progressive editorial tone."
— A47 Editor
Kim Jong-un, crypto bros and a $6.3bn heist – podcast
The Guardian reports that Binance, the world's largest cryptocurrency exchange, suffered a security breach estimated at about $6.3bn in assets, which would make it the largest crypto heist on record. Experts point to North Korea as the likely culprit...
Breaking news, politics, business, and entertainment from the U.S. and around the world.
"The New York Post is a tabloid-format newspaper known for its sensationalist headlines and conservative-leaning editorial tone."
— A47 Editor
North Korea laundering Binance billions with Chinese help — to spend on new missiles
North Korean state-linked hackers are suspected of stealing about $6.3 billion in cryptocurrency from Binance, the world's largest crypto exchange, in what is widely described as the largest crypto theft on record. According to the New York Post, rou...
Research, news, and analysis on blockchain startups, DeFi, and regulations.
"Crypto Briefing provides research, news, and analysis on blockchain startups, DeFi, and crypto regulations with investor-focused coverage."
— A47 Editor
Binance blocks 57 suspected North Korea-linked cyber threats in 2026
Binance has blocked 57 suspected cyber threats linked to North Korea in 2026, according to its disclosure, against a backdrop of a reported hot wallet breach that Binance estimates affected roughly $6.3 billion in assets. The exchange says customer f...
Curated tech headlines including AI stories.
"Influential aggregator surfacing the day’s top tech/AI links."
— A47 Editor
Chainalysis and Elliptic expect North Korean hackers to take months to launder the Binance proceeds, utilizing scripted automation and DeFi lending protocols (Financial Times)
Binance, the world's largest cryptocurrency exchange, suspended all deposits and withdrawals after a security incident that Elliptic and other reporting estimate drained roughly $6.3 billion in crypto assets, with almost all of it taken within the fi...
Editor-curated FT homepage stories spanning markets, business, world, and opinion.
"The Financial Times is a globally respected business publication with a centrist/center-left tone and strong markets focus."
— A47 Editor
North Korean hackers expected to take months to launder Binance billions
The world's largest cryptocurrency exchange, Binance, suffered a security breach that industry reports estimate at about $6.3 billion in assets, which would make it the largest crypto heist on record. The exchange suspended deposits and withdrawals, ...