Binance attributes crypto theft to North Korea after FBI links DPRK to attack

Situation Overview

On 3 November 2026, Binance published an initial report on the crypto theft it suffered the previous week, calling it the largest crypto theft ever and valuing it at more than $6.3 billion. In the report, Binance said, “This should not have happened” and apologised for the concern, disruptions and uncertainty caused to users, partners and the wider industry. Binance confirmed early rumours and cited the first conclusions published by the US FBI, which directly blamed the North Korean regime for the attack. Binance also said it had identified “57 thwarted attacks” allegedly originating from North Korea during 2026, framing them as evidence of persistent threats from state-backed actors targeting the cryptocurrency industry. The next concrete step signalled in the report is the continuation of Binance’s investigation and follow-up on the FBI’s findings, without a specific date or scheduled action stated in the article.

Geopolitical Implications

1. 01

   State-backed cyber operations targeting cryptocurrency exchanges

2. 02

   US investigative findings increase enforcement and intelligence focus on DPRK-linked activity

Key Signals

• —

  Further Binance updates on the theft investigation

• —

  Additional FBI findings tied to DPRK-linked cyber activity

Topics & Keywords

Market Impact Analysis

AI Threat Assessment

Event Timeline