The FBI attributed the theft of more than $6 billion in virtual assets from Binance, on or about Oct. 29, 2026, to North Korea. It said attackers had converted stolen assets primarily into ether and expected further conversions. On Oct. 30, before the FBI’s attribution, President Donald Trump said U.S. officials were looking into the hack and possible North Korean involvement.
Binance said on Oct. 31 that it had replenished 90% of affected holdings and fully backed 10 cryptocurrencies. It was sourcing less liquid tokens for the remaining shortfall and pledged to absorb all losses. The replacement purchases were separate from recovering stolen funds; withdrawals were still only targeted to resume on Sunday, Nov. 1.
