North Korea Steals USD 6.36 Billion From Binance in the Largest Hack in History
TRM Labs opens in a new window
On October 29, 2026, an attacker transferred approximately USD 6.36 billion out of Binance wallets across ten blockchains, with the majority of the funds moved in around 20 minutes beginning at 20:05 UTC. This incident is considered the largest crypto theft ever recorded, surpassing the Bybit hack of February 2025 by a significant margin. Binance has acknowledged the security breach and temporarily suspended withdrawals on several networks.
TRM Labs attributes this attack to TraderTraitor, North Korea’s elite hacking unit, based on robust on-chain and off-chain intelligence. We have high confidence in this assessment. TRM is actively tracking the funds and issuing alerts.
Key Takeaways:
- A significant sum of USD 6.36 billion was stolen from Binance wallets.
- The theft occurred over ten blockchains in a brief period.
- TRM Labs, based on strong intelligence, suspects North Korea's TraderTraitor unit is responsible.
- Binance has suspended withdrawals while investigating the incident.