The global cyber war · Attribution and response

FBI says North Korea was responsible for the theft of more than $6 billion from Binance

Confirmed1 distinct origin, 1 independent.

The FBI said in an alert on 31 October that North Korea was responsible for the theft of more than $6 billion in virtual assets from Binance on or about 29 October, naming the actor it calls TraderTraitor. The FBI, the Secret Service and IRS Criminal Investigation asked exchanges to block transactions tied to 628 laundering addresses the FBI published, BleepingComputer reported. President Trump said the same day that it was not known whether North Korea was behind it, AP reported. No North Korean response was found.

When: 31 October 2026
Where: United States, the US
What: policy
Acting party: Government of the United States
Against: Government of North Korea (DPRK), including the Korean People's Army
Attribution: Acknowledged by the acting party. The FBI issued the attribution in its own name; North Korea was not found to have answered.
In the record: Published 2026-11-09 22:52 UTC · backfilled

Sources

Evidence BleepingComputer Media · Not yet classified origin: FBI alert, 31 Oct · published 2026-11-01 00:00 UTC was responsible for the theft of more than $6 billion USD in virtual assets from cryptocurrency exchange Binance, on or about October 29, 2026
Evidence KSAT Media · Independent origin: FBI alert, 31 Oct · published 2026-10-31 00:00 UTC malicious cyber activity

History

First recorded 9 Nov, 22:52 UTC, as confirmed (an admission by the acting party plus an independent origin).

Cite or reuse

The War Record, "FBI says North Korea was responsible for the theft of more than $6 billion from Binance", record ev-20261109-zc4t, version 1, https://thewarrecord.com/events/ev-20261109-zc4t/

This month's events as JSON (id ev-20261109-zc4t) · CC BY 4.0