Binance Restores Major Crypto Withdrawals After FBI Confirms North Korean $6.3B Heist

Key points

• Binance resumed withdrawals for Bitcoin, Ethereum, BNB, XRP, Base, Doge, and Optimism on November 1, 2026, marking the first phase of a phased restoration process.
• The FBI confirmed on October 30 that North Korea’s TraderTraitor group stole over $6 billion in virtual assets from Binance on October 29, 2026.
• Binance stated it has covered 90% of the losses using its Secure Asset Fund for Users and corporate reserves, with the remaining 10% being sourced through market and over-the-counter transactions.
• The FBI observed hackers converting stolen assets into Ethereum and warned that further laundering would occur via decentralized finance and instant swap services.
• President Donald Trump stated his administration was gathering information on the incident but expressed no immediate concern, noting that if North Korea is responsible, the U.S. will address it.

Background

The breach, which occurred on October 29, 2026, caused a sharp decline in cryptocurrency prices, with Bitcoin falling below $78,000. Major stablecoin issuers, including Tether and Circle, froze over $2.3 billion in related assets to prevent the movement of stolen funds. Investigations suggested the attack exploited a compromised DevOps engineer’s laptop to access service containers. This incident follows a similar $1.5 billion theft from the Bybit platform in February 2025, also attributed to TraderTraitor.

How outlets are covering it

CBS News and Fox Business both reported the FBI’s attribution of the hack to North Korea’s TraderTraitor group, confirming earlier suspicions from private investigators. Fox Business highlighted expert Eric Schiffer’s warning that the breach could signal a broader wave of AI-driven cyberattacks, describing it as a potential 'bloodbath.' NBC News focused on the operational methods of TraderTraitor, noting how the group previously exploited employees and software providers. While all sources agreed on the scale of the theft and the FBI’s involvement, Fox Business emphasized the potential for future sophisticated attacks, whereas CBS News focused on the immediate restoration of withdrawals and the exchange’s financial assurances.

Why it matters

The incident highlights the growing vulnerability of major financial institutions to state-sponsored cyberattacks and the potential for AI to enhance hacking capabilities. The scale of the theft and the subsequent market reaction underscore the systemic risks in the cryptocurrency sector. The FBI’s call for private sector entities to block transactions linked to stolen funds indicates a coordinated effort to mitigate the impact of such breaches on the broader financial system.

What to watch

Binance plans to continue restoring additional assets and networks in phases as security checks are completed. The FBI and its partners, including the U.S. Secret Service and IRS Criminal Investigation, are urging digital asset service providers to block transactions involving wallet addresses linked to the stolen funds. President Trump’s administration is expected to engage with North Korea if the attribution is confirmed, potentially leading to diplomatic or economic repercussions.