North Korea Responsible for $6 Billion Binance Hack, CNN Reports

CNN reports that multiple investigators have pointed to North Korea as responsible for the largest cryptocurrency theft on record, in which hackers drained more than $6 billion from Binance. Blockchain analysis firms including TRM Labs and Chainalysis have attributed the October 29 incident to North Korea’s elite hacking unit TraderTraitor with high confidence. TRM Labs stated that an attacker moved approximately $6.36 billion out of Binance wallets across ten blockchains, most of it in about 20 minutes. The firm based its attribution on robust on-chain and off-chain intelligence and noted similarities to previous North Korea-linked heists, including the 2025 Bybit attack that the FBI also attributed to TraderTraitor. Chainalysis separately told CNN it holds high confidence that North Korea was behind the hack. Other firms, including Pangolin Intelligence, reached similar conclusions after correlating on-chain activity with prior incidents. Details of the Attack Binance has estimated the total impact at around $6.3 billion and said approximately $3 billion of the affected assets have been frozen on-chain with the help of partners including Tether and Circle. The exchange suspended deposits and withdrawals while investigating. Its preliminary findings suggest the breach may have involved a compromised DevOps engineer’s laptop that allowed an attacker to access a system and submit unauthorized withdrawal transactions. Binance said it found no evidence of a wallet private key leak and has pledged to cover all losses from company funds and its emergency assets fund, stating that user funds are safe. The attack involved rapid movement of Bitcoin, Ethereum, stablecoins, and other assets. Some stolen Bitcoin has been split across multiple wallets. North Korea has previously denied hacking allegations. CNN reached out to North Korea’s mission at the UN and to U.S. authorities for comment. Broader Context TraderTraitor, linked to the broader Lazarus Group, has been tied by U.S. authorities to several of the largest crypto thefts in recent years. Proceeds from such attacks have been used, according to U.S. and UN assessments, to help fund North Korea’s weapons programs. The Binance incident dwarfs the previous record, the $1.5 billion Bybit heist in 2025. The event has drawn attention to the security of centralized exchanges and the ongoing role of state-sponsored cyber activity in cryptocurrency markets. Recovery efforts continue through freezes by stablecoin issuers and cooperation with law enforcement and blockchain intelligence firms. What to Watch Further confirmation or official statements from Binance, law enforcement, or U.S. agencies on attribution. Progress on freezing and recovering the remaining funds. Any response from North Korean officials. Binance’s full technical post-mortem and timeline for resuming full operations. Market and regulatory reactions to the largest crypto heist on record. Longer-term implications for exchange security practices and sanctions enforcement. CNN reports that investigators attribute the roughly $6.3 billion Binance hack to North Korea’s TraderTraitor unit. Binance has pledged to cover losses and said about $3 billion has been frozen so far. Digital8Hub will track further developments.