slide
1 November, 2026

FBI says North Korea stole more than $6 billion from Binance

The Federal Bureau of Investigation has stated that North Korea was responsible for the theft of more than $6 billion in virtual assets from the cryptocurrency exchange Binance on or about 29 October 2026. The FBI refers to this specific North Korean malicious cyber activity as TraderTraitor.

The FBI, working with the United States Secret Service and Internal Revenue Service Criminal Investigation, has observed TraderTraitor actors converting the stolen assets primarily into Ethereum. It is expected that these assets will then be further laundered through decentralised finance protocols and instant swap services as the actors prepare them for subsequent stages of laundering.

The FBI, United States Secret Service and Internal Revenue Service Criminal Investigation are urging private sector entities, including THORNode operators, RPC node operators, instant exchanges, decentralised finance services, blockchain analytics firms and other virtual asset service providers, to block transactions with or derived from addresses that TraderTraitor actors are using to launder these stolen assets. A full list of the relevant addresses has been published by the authorities.

The FBI has reaffirmed its commitment to protecting the virtual asset community by identifying, mitigating and disrupting North Korea’s illicit cybercrime and virtual asset theft activities. Anyone with information is asked to contact their local FBI field office or the FBI Internet Crime Complaint Center at ic3.gov.

By John James

Leave a Reply