Binance reported $6.3bn theft as analysts linked attackers to North Korea

Binance suffered a reported $6.3bn cryptocurrency theft, according to the Guardian’s report published on 30 October 2026. Crypto crime consultancy Elliptic described it as potentially the largest known theft of any kind. The account said attackers compromised an engineer’s laptop and other access points, using Binance’s internal systems to authorise transfers rather than cracking private keys.

Elliptic and two other crypto analysis firms linked the attack to North Korea, with the report identifying the suspected unit as TraderTraitor. Binance said it would reimburse losses from its own funds and had frozen roughly half the assets targeted. The report did not clearly reconcile that frozen amount with the headline theft figure.

For customers, the report’s central distinction was between an exchange’s reimbursement promise and government-backed protection. It said crypto holdings lacked formal deposit protection in the US, UK and Australia. Binance’s assurance therefore depended on the company itself, rather than the safety nets available for eligible deposits when regulated banks fail.