The recent theft of $6.3 billion from cryptocurrency exchange Binance has been linked to a hacking group from North Korea, according to a report by TRM Labs. This incident, identified as the largest cryptocurrency heist in history, occurred on October 29, 2026.
TRM Labs indicated that the North Korean unit known as TraderTraitor was responsible for the attack. The hackers reportedly targeted wallets across ten different blockchains, managing to siphon off the funds in approximately 20 minutes.
Implications of the Binance Heist
While Binance has successfully frozen around $3 billion of the stolen assets with assistance from partners, the fate of the remaining $3.3 billion remains uncertain. This breach not only undermines trust in Binance but also raises questions about the security protocols of cryptocurrency exchanges globally.
The theft of Binance is the largest crypto theft on record. Even after the stablecoin freezes, the amount the attacker still holds exceeds any previous theft.
TRM Labs
The TraderTraitor group has previously been implicated in other significant cybercrimes, including a $1.5 billion attack on the ByBit exchange in 2025. TRM's analysis noted similarities between the Binance breach and earlier attacks linked to North Korean hackers, signaling a worrying trend in their operational capabilities.
This incident follows a pattern of increased cyber activity attributed to North Korean hackers, who have developed sophisticated techniques for executing high-stakes cyber thefts. The global cryptocurrency community is now on alert as the implications of such breaches could extend beyond financial losses, potentially impacting regulatory measures and security protocols.