FBI Blames North Korea for $6B Binance Hack, Targets THORChain
In an Oct. 31 alert, the FBI pinned the Oct. 29 Binance theft on North Korea's TraderTraitor operation and urged THORChain to block the stolen funds.
Advertising disclosure: we may earn a commission when you join an operator via links on this page, at no cost to you. This never dictates our ratings. How we make money
Key takeaways
- The FBI says North Korean cyber actors, tracked as TraderTraitor, stole more than $6 billion from Binance.
- The attack happened Oct. 29, and the FBI published its security alert on Oct. 31.
- The alert amounts to official US government attribution for one of the largest crypto thefts on record.
- The FBI is urging THORChain to block the stolen funds from moving through its network.
- Details beyond this are thin in the material available, so treat the full scope as still developing.
North Korea did it, according to the FBI. In a security alert dated Oct. 31, the agency named the TraderTraitor operation as the party that stole more than $6 billion from Binance in an attack on Oct. 29.
What the FBI said
The alert ties the theft to North Korean cyber actors. That's official US government attribution for what would rank among the largest crypto thefts ever recorded. TraderTraitor is the label US authorities use for a North Korea-linked hacking operation.
The FBI also singled out THORChain, and it's urging the cross-chain protocol to block the stolen funds. The reason is mechanical. THORChain lets users swap assets across blockchains with no central intermediary, and hackers have leaned on that route to move loot.
One caveat on my sourcing: I've only seen the opening of the FBI's alert, as reported by CryptoSlate. How the attackers got in, which assets were taken, how Binance is responding? None of that is in the material I have, so I won't guess.
Why it matters
Attribution is one thing. Recovery is another. Stolen crypto usually gets laundered fast, and the FBI publicly leaning on a decentralized protocol shows how hard it is to freeze funds when no company sits in the middle. The real test is whether THORChain's validators and community act on the request.
For anyone keeping assets on exchanges, the takeaway is blunt: even the biggest platforms are targets for state-backed hackers. Watch Binance's official statements on user funds. And watch whether THORChain responds.
Source: CryptoSlate
Top Crypto Casinos Right Now
🇮🇳 Showing sites that accept players from India Change country
Advertising disclosure: we may earn a commission when you join an operator via links on this page, at no cost to you. This never dictates our ratings. How we make money
More info Less info
Why we chose it: A US-facing book that pays a premium for crypto deposits: 125% against 100% for cash, with fee-free deposits across five coins.
- Payout time
- Within 24 hours (crypto)
- KYC
- Required
Restricted countries: Australia, Afghanistan, Bulgaria, Central African Republic, Congo - Brazzaville, Eritrea, France, Guinea-Bissau and 16 more.
More info Less info
Why we chose it: Phemex is a derivatives-first venue for Europe, Asia and Latin America. Good engine, mid-size liquidity, and a blocklist that grew in 2025.
- Online since
- 2019
- Licence
- Seychelles
- KYC
- Required
Restricted countries: United Arab Emirates, Afghanistan, Australia, Belgium, Bermuda, Belarus, Ontario (Canada), China and 18 more.
More info Less info
Why we chose it: BetNow's casino floor with the biggest match bonus we list. The 200% headline deserves a careful read of the code terms behind it.
- Payout time
- Within 24 hours (crypto)
- KYC
- Required
Restricted countries: Australia, Afghanistan, Bulgaria, Central African Republic, Congo - Brazzaville, Eritrea, France, Guinea-Bissau and 16 more.
Mia Chen
Mia digs into DeFi and on-chain data, translating protocol mechanics into plain English for everyday readers.
