Binance Resumes Operations After $6.3B North Korean Heist, Covering 95% of Losses

Key points

• Binance resumed phased withdrawals on Sunday after a $6.3 billion hack, processing $4.6 billion in outflows and $1 billion in deposits by Monday.
• The FBI identified the North Korean state-backed group TraderTraitor as responsible for the theft, which experts called the largest bank heist in history.
• Binance has covered 95% of the stolen funds using its Secure Asset Fund for Users and corporate treasury, with the remaining 5% involving less liquid tokens.
• Authorities are urging the industry to block transactions linked to the stolen assets, which are being converted into Ethereum to facilitate laundering.
• The incident highlights growing risks from AI-driven cyberattacks, with analysts warning of a potential wave of sophisticated hacks targeting crypto exchanges.

Background

This incident follows a surge in crypto hacks this year, fueled by AI tools capable of detecting zero-day vulnerabilities. TraderTraitor was previously linked to a $1.5 billion heist on Bybit in 2025 and a $350 million theft from Bitget in September 2026. The attack underscores the vulnerability of centralized exchanges despite claims of decentralization.

How outlets are covering it

The New York Post emphasizes the scale of customer withdrawals and Binance's commitment to covering losses, while Fox Business highlights expert warnings about an impending 'AI hacking bloodbath.' CBS News focuses on the net outflow figures and the resilience of the crypto market, noting that Bitcoin remained stable. CNN details the phased resumption of withdrawals and the specific assets being restored. All sources agree on the FBI's attribution to North Korea but differ in emphasis on the financial impact versus the security implications.

Why it matters

The breach exposes critical vulnerabilities in the world's largest cryptocurrency exchange, potentially undermining confidence in digital asset security. The FBI's involvement and the scale of the theft signal a shift in cybercrime tactics, with state-sponsored actors leveraging AI to target major financial institutions. This could lead to increased regulatory scrutiny and stricter security measures across the crypto industry.

What to watch

Binance plans to continue restoring additional assets in phases as security checks are completed. The FBI and other authorities are expected to monitor the laundering of the remaining stolen funds, while the industry may face heightened scrutiny over its security protocols. Further updates on the recovery process and potential legal actions against the hackers are anticipated.