The FBI said North Korea was behind the theft of more than $6 billion in digital assets from the crypto exchange Binance. The FBI dates the theft to on or about October 29, 2026. It calls the North Korean hacking activity behind it "TraderTraitor." The FBI said it saw the group turn the stolen funds mostly into Ethereum, a widely used cryptocurrency.
The FBI said it expects the group to launder the money further, using decentralized finance (DeFi) services and instant swap services. These let people trade one coin for another quickly. The FBI's notice does not say how the attackers got into Binance. It does not say how much money has been recovered. It gives no timeline for any recovery. It lists a large set of wallet addresses that it says hold or have held the stolen assets. The FBI says these are run by, or closely tied to, TraderTraitor.
The FBI, the Secret Service and IRS-CI asked private firms to block transactions with those addresses. The request covers node operators, instant exchanges, DeFi services and blockchain analytics firms. Anyone who runs or builds crypto services can compare their systems against the published list. Anyone with information is asked to contact a local FBI field office or ic3.gov.