Cryptelio

Hacks & Exploits

Trump Suggests US Contact with North Korea Over $6.3 Billion Binance Hack

Cryptelio Editorial Published 1 Nov 2026 · 13:01 UTC

President Donald Trump has stated that the United States would consider contacting North Korean officials if investigations confirm that the country was involved in the recent $6.3 billion hack of Binance, the world’s largest cryptocurrency exchange. His comments were made on October 30 and 31, following the fallout from the breach that occurred on October 29.

The hack involved the theft of digital assets across ten different blockchains, with most of the funds moved within approximately 20 minutes. Blockchain analytics firms TRM Labs and Chainalysis quickly attributed the attack to a North Korean state-sponsored hacking group known as TraderTraitor, which has been linked to previous high-profile cyber incidents, including the Bybit breach in 2025. The FBI confirmed this attribution on October 31 and urged industry participants to block wallet addresses associated with the operation.

A significant portion of the stolen assets has reportedly been converted to Ethereum (ETH). In response to the breach, Binance announced it would utilize around $6.34 billion in corporate resources to cover approximately 90% of the stolen assets, thereby protecting its customers. The exchange has also frozen affected accounts and worked with stablecoin issuers, freezing about $2.7 billion in stablecoins. By early November, Binance cautiously began to resume withdrawals.

TraderTraitor is not a new player in the crypto hacking scene; the group was previously involved in the theft of roughly $1.5 billion from Bybit in February 2025. The scale of the Binance hack is more than four times that amount, significantly increasing North Korea’s known proceeds from similar operations.

Trump's remarks elevate the situation from a cybersecurity incident to a potential diplomatic issue, as the FBI's attribution provides a basis for his conditional outreach to North Korean authorities.

New Developments on the Binance Hack

  • The FBI has officially attributed the $6.3 billion Binance hack to North Korea-linked hackers, specifically identifying the TraderTraitor hacking group.
  • Authorities have identified over 600 Ethereum addresses, nearly 20 Bitcoin addresses, and one Solana address associated with the hack.
  • The FBI urges cryptocurrency exchanges and blockchain service providers to block transactions linked to these identified wallet addresses.
  • According to Chainalysis, the hackers have used thousands of addresses, with the number potentially reaching tens of thousands as they continue to obscure the origins of the stolen funds.
  • Binance has allocated over $6.34 billion to cover losses from the hack and has replenished approximately 90% of the stolen assets.
  • Industry partners have frozen billions of dollars in assets related to the incident, while ongoing tracing and recovery efforts continue.

FAQ

What was the recent hack involving Binance about?

The recent hack involved the theft of $6.3 billion in digital assets from Binance, the world's largest cryptocurrency exchange, across ten different blockchains.

Who is believed to be behind the Binance hack?

The hack has been attributed to a North Korean state-sponsored hacking group known as TraderTraitor, which has a history of involvement in high-profile cyber incidents.

What actions is Binance taking in response to the hack?

Binance announced it would use approximately $6.34 billion in corporate resources to cover about 90% of the stolen assets, freeze affected accounts, and work with stablecoin issuers to freeze around $2.7 billion in stablecoins.

What did President Trump suggest regarding North Korea's involvement?

President Trump suggested that the United States might consider contacting North Korean officials if investigations confirm their involvement in the Binance hack, elevating the situation to a potential diplomatic issue.

What is the significance of the FBI's attribution to North Korea?

The FBI's attribution of the hack to North Korea provides a basis for potential diplomatic outreach and emphasizes the severity of the cybersecurity incident, highlighting the ongoing threat from state-sponsored hacking groups.

Read story →