The Binance hack on October 29, 2026, was carried out by North Korean hacking group TraderTraitor, blockchain analysis firm TRM Labs said. TRM estimates that approximately $6.36 billion was moved out of Binance wallets across ten blockchains.

Binance hack attribution

TRM Labs’ investigation attributed the attack to TraderTraitor with high confidence, citing on-chain and off-chain intelligence. The firm said most of the transfers occurred in roughly 20 minutes, starting at 20:05 UTC.

The attribution is TRM’s assessment. The firm said it would share further findings as its investigation develops.

Frozen assets and exchange response

TRM estimated that roughly $2.7 billion had been frozen on-chain as of 00:30 UTC on October 30, including stablecoins frozen by issuers and assets secured by Arbitrum’s Security Council. Its figures reflect the firm’s observations at that time.

Binance confirmed a security incident and temporarily suspended withdrawals on multiple networks as a precaution, TRM said. The exchange said user funds were safe.

TRM assessed that the attack pointed to a compromise of Binance’s hot-wallet signing infrastructure, which authorizes transactions. It said Binance had not published a root cause when the analysis was prepared.

Read More News

More FinanceVelix news

Disclaimer

This FinanceVelix article provides general information, not personalized financial, investment, legal, or tax advice. Market prices, interest rates and economic conditions can change; investments carry a risk of loss. Facts reflect the material available when published and may change. Check important information independently and consult a qualified professional when needed. Mentioning an asset, company, or service is not an endorsement.