Binance Restores Services After Record $6.3B Heist as North Korea Denies FBI Attribution

Key points

• Binance co-founder Changpeng Zhao confirmed that withdrawals are restored and all user funds are covered, stating that the platform is functioning without issues despite the massive breach.
• The October 29 attack, the largest in crypto history, involved hackers breaching internal automated transaction workflows via an employee's laptop rather than cracking cryptographic keys.
• The FBI and blockchain intelligence firms attributed the 20-minute raid to TraderTraitor, a state-sponsored cyber unit linked to North Korea, though Pyongyang denied involvement.
• Hackers moved stolen assets through approximately 12,000 wallets and 40,000 transactions across 11 blockchains, utilizing decentralized exchanges and cross-chain bridges to obscure the trail.
• Binance has covered 95% of the affected amount using corporate reserves and insurance funds, with the remaining 5% consisting of less liquid tokens that require time to source.

Background

Initial reports from late October indicated a suspected $2 billion outflow, which quickly escalated to a confirmed $6.3 billion theft. Stablecoin issuers Tether and Circle froze approximately $2.5 billion in related assets, causing Bitcoin prices to drop below $78,000. Experts have warned that this breach signals a new era of AI-enhanced cyberattacks, while Binance co-CEOs Richard Teng and Yi Le have led the exchange's response alongside founder Changpeng Zhao.

How outlets are covering it

While Yahoo Finance emphasizes the operational stability and full restitution promised by Binance leadership, CNBC focuses on the forensic tracing of funds and the diplomatic fallout. Both sources agree on the $6.3 billion figure, but CNBC highlights the complexity of the laundering operation, noting that hackers used an average of one new wallet every 25 seconds. Yahoo Finance notes that North Korea denied involvement, while CNBC details Pyongyang's specific rejection of the FBI's attribution as a 'grave political provocation.'

Why it matters

This incident represents the largest digital asset heist in history, testing the resilience of the world's largest cryptocurrency exchange. The successful freezing of 44% of the stolen funds demonstrates the effectiveness of coordinated industry responses, while the attribution to state-sponsored actors highlights the escalating geopolitical risks in the crypto space.

What to watch

Binance is progressively reopening withdrawals for additional crypto assets across more networks. Authorities are urging the industry to block associated wallet addresses to prevent further laundering, while analysts expect the remaining unfrozen funds to be gradually converted into bitcoin and cashed out over several months.