One of the largest blows ever recorded in the cryptocurrency market is being attributed to North Korea. According to the FBI, more than $6 billion in digital assets were stolen from the Binance platform in the October 29, 2026 attack, while U.S. authorities claim the funds are being moved quickly to conceal and recycle them within the crypto ecosystem.
The FBI’s accusation over the attack on Binance
According to the official version of U.S. authorities, responsibility for the attack lies with North Korea. The FBI has identified the TraderTraitor hacker group as being involved, a group also known from other investigations into major attacks in the digital assets sector.
According to the FBI, the same group was also linked to the theft of $1.5 billion from the Bybit platform last year, reinforcing suspicions of a repeated pattern of sophisticated attacks on cryptocurrency exchanges.
How the stolen funds are suspected of being moved
U.S. authorities say the stolen assets, including Bitcoin, Ethereum and stablecoins, are being converted mainly into Ethereum. According to them, this is a step that may be used to make further tracing of the money more difficult.
The FBI warns that there is a risk these funds will be laundered through decentralized finance platforms and other exchange services, areas where institutional oversight remains limited and intervention often comes after the damage has been done.
Call to block suspected transactions
The U.S. agency has asked cryptocurrency exchanges and blockchain analytics companies to identify and block movements linked to the suspected addresses.
This request once again shows the dependence of investigations on cooperation from the private sector, in a market where billions can be moved within minutes and where restraint mechanisms are not always keeping pace with the speed of attacks.
Binance response and the hit to the market
Binance has said it will fully cover the financial losses caused by the attack. According to the company, more than $6.34 billion from its own funds has been used to recover about 90% of the stolen assets, while the remaining portion is expected to take more time to buy back.
The attack has been described as the largest theft of digital currencies so far. Beyond the direct losses, the event also affected the market, bringing price declines for several of the leading cryptocurrencies.
The case once again brings into focus the weaknesses of the global cryptocurrency market, where the rapid circulation of funds, the lack of unified oversight and the use of decentralized channels continue to create conditions for attacks with enormous consequences.
Claims of North Korean involvement are based on the assessment of U.S. authorities, while the dynamics of the movement of funds show how difficult real control remains in a market that often promises technological security but exposes serious gaps when it is attacked.