Photo via Al Jazeera

FBI blames North Korea for record $6.3bn crypto heist

Read the original at Al Jazeera ↗
Cite

Al Jazeera Staff. (2026, November 1). FBI blames North Korea for record $6.3bn crypto heist. Al Jazeera. https://www.aljazeera.com/news/2026/11/1/fbi-blames-north-korea-for-record-6-3bn-crypto-heist?traffic_source=rss

Dated from the outlet's own feed. Check the original for its byline.

Al Jazeera · collected 2026-11-01 · by Al Jazeera Staff

Quick Summary

The FBI has linked North Korea to a theft of $6.3 billion in cryptocurrency from the exchange Binance, with malicious actors converting much of it into Ethereum for laundering purposes. The hack is attributed to the group TraderTraitor, which was also responsible for a $1.5 billion theft last year from Bybit. In response, Binance has replaced 90% of the stolen assets using its Secure Asset Fund for Users and other reserves, aiming to reimburse users without financial impact on them.
Written by AI on 2026-11-01, from this article's own text only (the story summary below draws on all the coverage).

AI analysis

Story summary

On October 29, Binance, the world’s largest crypto exchange, reported investigating a "potential security issue" involving very large transfers on its platform. By October 30, the situation escalated as Tether and Circle froze over $1.5 billion and $1 billion in stablecoins respectively, amid fears of a hack. The same day, Binance confirmed that at least $2.54 billion in funds had been frozen, with founder CZ Zhao suggesting it "does look like a hack." On November 1, the estimated damage reached up to $6.3 billion, making it potentially the largest crypto heist ever. As of November 2, Binance customers withdrew over $4.7 billion in assets after the exchange reopened with partial services restored and announced covering around 95% of stolen funds using company resources. The incident highlights growing risks in cryptocurrency security and investor confidence.

Written for “Binance Resumes Withdrawals After Hack” on 2026-11-02, grounded in this article and the 70 other(s) covering the same event.

Story

📰 Binance Resumes Withdrawals After Hack
Technology · 71 article(s) covering the same event. Compare every outlet's account →

Compared with similar articles

This article reads unscored and hedges 13% of its claims. Each row says how that neighbour differs.
Deutsche Welle
Hedges 2 of 14 claims Outlet record 95/100
Semafor
⚖️ Leans strongly right Hedges 0 of 3 claims Outlet record 59/100
New York Post
Hedges 3 of 16 claims Outlet record 66/100
The Straits Times
Hedges 2 of 17 claims Outlet record 66/100
The Hindu
⚖️ Leans strongly right Hedges 0 of 16 claims Outlet record 77/100
South China Morning Post
Hedges 0 of 3 claims Outlet record 63/100
ABC News (AU)
Hedges 2 of 18 claims Outlet record 68/100
CBS News
Hedges 0 of 13 claims Outlet record 66/100
“The articles describe different events: one about sanctions against North Koreans and Russians involved in an IT worker fraud scheme, and another about a $6.3 billion crypto heist linked to North Korea.”
The Sydney Morning Herald
Hedges 7 of 28 claims Outlet record 61/100
How this article was measured signals, leaning charts, publisher record, byline, topics and claims

Signals How these are calculated →

Claims extracted
15
sentences that state something as happening or true
Uncertain
13%
2 of 15 hedged ("reportedly", "may", "according to")
Leaning
not political
takes no side on a contested political question
Publisher signals
60/100
Al Jazeera's corrections and hedging, across everything collected from it. Not a measure of accuracy.
Outlets on this story
71
Technology
Same framing elsewhere
1
articles that frame the event the way this one does
Analyzed 2026-11-01 · how these are computed

How this is being covered How these are calculated →

Article leaning vs. publisher reliability
Source leaning vs. consistency

Publisher

Al Jazeera · 4712 article(s) · 3 correction(s) detected
Running correction rate · 3 correction(s)

Who wrote this

Al Jazeera Staff
845 article(s) here · 1 carrying a prediction
🔮 Reflecting the step up in activity, China’s Ministry of Foreign Affairs announced on Monday that Zhai Jun, Beijing’s special envoy on the Middle East, will visit Iran, Oman and Saudi Arabia this month.
🔮 Israel’s Arab parties, which won a record-breaking 19 seats in last week’s general elections, are set to back opposition leader Gadi Eisenkot’s bloc, further trampling Israeli Prime Minister Benjamin Netanyahu’s chances of leading another government.
🔮 Jordan’s King Abdullah II says the kingdom would not be shaken by a deadly attack on a church in the southern city of Karak last month.
🔮 He said it is the first line of defence for the Houthis in the eastern axis and control over the rugged region would give government forces the ability to disrupt rebel supply routes.
🔮 In February last year, Ocalan called on the PKK to disband and disarm and the group announced its dissolution that May.
🔮 Ongoing fighting in the Ukrainian region of Zaporizhia has raised fears that the tragic story could repeat itself.
🔮 Al Jazeera could not independently verify the claims.
🔮 Voting will also be held to elect governors in 36 of the 50 US states.
🔮 It resulted in the body overseeing CCTV saying it would halt broadcasts of the top Spanish league.
🔮 Recommended Stories list of 4 items- list 1 of 4Bangladesh workers clash with police in protests over low pay - list 2 of 4Bangladesh forms wage board as garment workers protest - list 3 of 4Bangladesh per capita GDP forecast to outstrip India’s: What does it mean? - list 4 of 4As
Wire or desk byline, not an individual reporter.
Also by Al Jazeera Staff
Nothing else under this byline is closely related to this article, so these are simply their most recent.
All 845 articles by Al Jazeera Staff →

Topics

3Russia Binance FBI Israel North Korea

Subjects

Binance ORG · 8× FBI ORG · 3× North Korea GPE · 2× 3Netanyahu PERSON · 1× 3Russia GPE · 1× Bybit ORG · 1× Futures Insurance Fund ORG · 1× Israel GPE · 1× TraderTraitor ORG · 1× Ukraine GPE · 1×

Narrative

Recommended Stories list of 3 items- list 1 of 3Netanyahu’s pitch: Can Israel use crypto to evade economic sanctions? - list 2 of 3Tracking the money: The biggest donors in the 2026 US midterm elections - list 3 of 3Russia jails IT worker for 13 years for donating money to Ukraine The US agency blamed the operation specifically on a group called TraderTraitor, the same group blamed for a $1.5bn theft from the Bybit platform in February last year.
framing: assertive · carried by 1 article(s) · first seen 2026-11-01
🔮 According to the statement, the assets are expected to be “further laundered” in stages.
2026-11-01 · Al Jazeera
FBI blames North Korea for record $6.3bn crypto heist · assertive framing

Claims (15 extracted, 2 hedged)

The FBI has linked North Korea to the theft of a record $6.3bn in virtual assets from cryptocurrency exchange Binance. asserted
FBI → link → Binance
Malicious actors from North Korea were observed laundering the stolen assets by converting them primarily into the cryptocurrency Ethereum, the FBI said in a statement on Saturday. asserted
FBI → observe → Saturday
Recommended Stories list of 3 items- list 1 of 3Netanyahu’s pitch: Can Israel use crypto to evade economic sanctions? - list 2 of 3Tracking the money: The biggest donors in the 2026 US midterm elections - list 3 of 3Russia jails IT worker for 13 years for donating money to Ukraine The US agency blamed the operation specifically on a group called TraderTraitor, the same group blamed for a $1.5bn theft from the Bybit platform in February last year. asserted
agency → use → February
According to the statement, the assets are expected to be “further laundered” in stages. uncertain
assets → accord → stages
The FBI called on virtual asset service providers to block transactions being used in the latest laundering operation, providing the suspected digital addresses to watch for. asserted
FBI → call → addresses
In a separate statement on Saturday, Binance said it has replaced 90 percent of the amount stolen by using company money to buy new tokens. asserted
it → say → tokens
The remaining 10 percent consists of less liquid tokens, meaning they may take longer to buy, it added. uncertain
it → consist → tokens
“We will continue to buy the remaining relevant token assets… until the covered amount reaches 100 [percent] for all tokens. asserted
amount → continue → tokens
Binance will absorb the financial impact of these stolen funds, not our users,” the company said on X. asserted
company → absorb → X.
The money spent re-buying tokens came from a $1bn Secure Asset Fund for Users (SAFU), a Bitcoin reserve fund Binance holds to protect customers in the event of security breaches, as well as some of its Futures Insurance Fund and the company’s corporate treasury. asserted
Binance → spend → Fund
Crypto prices fell on Friday, as Binance, which runs the world’s largest crypto exchange, sought to reassure customers their funds were safe. asserted
funds → fall → customers
Binance co-CEO Richard Teng said on Friday that the breach was a “complex attack” involving a compromised laptop and malicious software designed to delete evidence of its activity, making it hard to trace and investigate. asserted
it → say → activity
After the hack, the exchange stopped allowing customers to withdraw their funds. asserted
customers → stop → funds
Binance said later on Saturday that it was on track to reopen withdrawals on Sunday. asserted
it → say → Sunday
Binance also announced the publication of a new proof-of-reserves snapshot, allowing users to independently verify that their assets were backed at a minimum 1:1 ratio. asserted
assets → announce → ratio
💬Give feedback
🕘History 🎫Support