The FBI says North Korea-linked hackers known as TraderTraitor stole more than $6 billion in cryptocurrency from Binance.
The FBI said the group is converting the stolen assets mainly into Ethereum. It warned that more attempts to hide the money could follow. The bureau said the theft happened around October 29, 2026.
Investigators are tracking transactions tied to addresses run by or connected to the group. It urged cryptocurrency exchanges, cryptocurrency finance services, companies running blockchain systems and other providers to block transactions involving those addresses. Blockchain analysis firms estimate the stolen amount at about $6.4 billion.
Chainalysis calls it the largest cryptocurrency theft on record, while TRM Labs estimates it at about $6.36 billion. Chainalysis says the money left Binance wallets through several blockchain networks. It reports that attackers exchanged hundreds of millions of dollars in digital currencies designed to maintain a steady value for Ethereum as efforts to freeze some assets began.
TRM also attributes the theft to TraderTraitor, based on its analysis of activity recorded both on blockchains and outside them. Those assessments are the firms’ conclusions, while the FBI has made its own attribution publicly. The investigation and tracking of the funds are ongoing.