Why Is the Binance Hack Trending? North Korea's TraderTraitor and the $6.3 Billion Heist Explained

Quick answer: "Binance hack" is trending because hackers drained roughly $6.3 billion from Binance, the world's largest crypto exchange, in what is now the biggest crypto theft ever recorded. U.S. officials and blockchain investigators say a North Korean hacking unit called TraderTraitor is behind it. Binance says customer funds will be fully covered and withdrawals have resumed.

What happened?

Late last week, an attacker moved about $6.36 billion out of Binance hot wallets spread across ten different blockchains. According to blockchain analytics firm TRM Labs, most of that money left in a window of roughly 20 minutes.

Binance paused withdrawals while it investigated, then reopened them on Sunday. Deposits were never affected, according to the exchange. Working with blockchain partners, Binance says it has frozen roughly $3 billion of the stolen assets so far.

For scale: the previous record was the $1.5 billion Bybit hack in February 2025. This one is more than four times larger.

Who is TraderTraitor?

TraderTraitor is the name security researchers use for an elite North Korean state-backed hacking group. TRM Labs said it attributes the Binance attack to TraderTraitor "with high confidence," and Chainalysis CEO Jonathan Levin also said the group was the likely culprit. The FBI has since said North Korea was responsible.

It is the same group the FBI blamed for the Bybit theft, and investigators say the two attacks share several fingerprints.

Why does North Korea steal crypto? Heavy U.N. sanctions have cut the country off from most of the global financial system. Experts say crypto theft has become one of Pyongyang's most important sources of hard currency, helping to fund its weapons and nuclear programs. South Korea's intelligence service has described North Korea's crypto-hacking capability as among the best in the world.

How did the hackers get in?

Binance's early findings point to a surprisingly ordinary entry point: a compromised laptop belonging to a DevOps engineer. From there, the attacker reached a service container inside Binance's systems and submitted unauthorized withdrawal transactions. Binance later said it found additional points of breach, but also that it had found no evidence that any wallet private keys were leaked.

Binance co-CEO Richard Teng stressed that this was a complex, multi-step operation rather than a single mistake. Still, some security experts are asking why stronger approval controls were not in place for withdrawals of this size.

This is a classic North Korean playbook: target the people who run the systems (often through fake job offers, poisoned files, or social engineering) rather than trying to break the cryptography itself.

Is my money on Binance safe?

According to Binance:

• Customer deposits were not affected.
• The company says it will cover all losses.
• Withdrawals have resumed.

Founder Changpeng "CZ" Zhao, who no longer runs the company, posted that user funds are safe and that, as a shareholder, he expects all user funds to be fully covered.

Those are company statements, and the investigation is ongoing. The broader lesson is the old crypto saying: "Not your keys, not your coins." Any crypto left on an exchange depends on that exchange's security.

What should crypto holders do right now?

1. Watch out for "refund" scams. After every big hack, fake emails, texts, and DMs appear offering "compensation" or asking you to "verify your wallet." Binance will never ask for your password, 2FA codes, or seed phrase.
2. Turn on strong 2FA (an authenticator app or security key, not SMS) and enable a withdrawal address whitelist.
3. Consider self-custody for long-term holdings. A hardware wallet keeps your keys offline and out of any exchange's hot wallet.
4. Don't panic-sell. Big hacks often cause short-term price swings. Make decisions based on your own plan, not headlines.

Why is this trending so hard?

• It's a record. At over $6 billion, it's the largest crypto hack in history, and some are already calling it the biggest heist of any kind.
• It's Binance. It's the world's biggest crypto exchange, so any problem there ripples across the entire crypto market.
• It's North Korea again. The attack lands in the middle of rising global tensions and renews questions about how a sanctioned state keeps pulling off billion-dollar thefts.
• Timing. It hit just days before the U.S. midterm elections, while markets were already rattled by AI-driven tech stock selling.

FAQ

How much was stolen in the Binance hack?
About $6.3 billion, according to blockchain investigators. Roughly $3 billion has been frozen.

Who hacked Binance?
Investigators and the FBI point to North Korea's TraderTraitor hacking unit.

Will Binance users lose money?
Binance says it will cover all losses and that deposits were not affected.

Is this bigger than the Bybit hack?
Yes. Bybit lost about $1.5 billion in February 2025. The Binance theft is roughly four times larger.

This article is for information only and is not financial advice. We'll update this post as the investigation develops.