Key Points
- Changpeng Zhao expressed gratitude to the U.S. Secret Service and federal law enforcement for their rapid response in freezing stolen cryptocurrency following the October 29 security breach.
- The exchange reports approximately $6.3 billion was compromised, with industry collaborators successfully freezing around $3 billion to date.
- Federal investigators identified the North Korean hacking collective TraderTraitor as responsible for the theft.
- Stolen assets are being primarily converted to Ethereum, with authorities anticipating continued laundering activities through decentralized finance platforms and crypto swap services.
- The exchange has committed to compensating all affected customers through corporate funds and its dedicated Secure Asset Fund for Users.
Changpeng Zhao, the founder of Binance, has publicly acknowledged the U.S. Secret Service and additional federal authorities for their assistance in securing stolen digital assets. The cryptocurrency platform suffered a massive security breach last week that resulted in losses exceeding $6 billion.
The incident occurred on October 29. According to Binance’s assessment, approximately $6.3 billion worth of digital currency was compromised, and collaborative efforts with industry stakeholders have successfully immobilized roughly $3 billion of those assets.
TRM Labs, a blockchain intelligence company, calculated that the perpetrators transferred approximately $6.36 billion across 10 different blockchain networks. The majority of these asset movements occurred in a window of about 20 minutes.
Law Enforcement Secures Significant Portion of Stolen Assets
On November 1, the Secret Service announced that investigators collaborated with cryptocurrency industry stakeholders immediately following the theft to identify and immobilize a substantial amount of the compromised assets. The agency declined to disclose the precise sum it has secured.
According to the Secret Service, efforts to retrieve the outstanding funds remain active. Investigators are actively monitoring the assets as they move through various cryptocurrency wallets.
The collaborative operation involves the FBI, IRS Criminal Investigation, and U.S. Attorney’s Offices representing the District of Columbia and the Central District of California. Additional support comes from the Department of Justice’s Computer Crime and Intellectual Property Section and its National Security Division.
Federal Bureau Identifies North Korean Threat Actors
On October 31, the FBI attributed the attack to North Korean cybercriminals operating under the designation TraderTraitor. Investigators observed the threat actors primarily converting the stolen cryptocurrency into Ethereum.
The FBI anticipates continued money laundering operations utilizing decentralized finance protocols and instant cryptocurrency exchange platforms. These platforms enable users to exchange digital assets without requiring traditional centralized intermediaries.
Law enforcement has urged node operators, instant exchange services, DeFi platforms, and blockchain intelligence companies to prevent transactions connected to the stolen funds. The FBI has also released a catalog of Ethereum wallet addresses associated with the perpetrators.
According to Chainalysis data, North Korean hacking operations account for approximately 89% of cryptocurrency theft losses in 2026. This Binance incident now ranks among the largest cryptocurrency heists in history, surpassing the roughly $1.5 billion taken from Bybit in February 2025.
Binance’s preliminary forensic analysis indicates the attackers potentially gained unauthorized access to a DevOps engineer’s laptop. This breach may have provided entry to an internal system responsible for processing withdrawal transactions.
The platform stated it discovered no indication that wallet private keys were exposed. It terminated the compromised access credentials and temporarily suspended withdrawals during comprehensive security audits.
The security breach immediately impacted cryptocurrency markets. Bitcoin and leading alternative cryptocurrencies declined in value, with liquidations surpassing $1.5 billion on October 30.
Binance has pledged to reimburse all affected customers for their losses. The platform intends to utilize corporate reserves and its dedicated Secure Asset Fund for Users, although the ultimate expense will depend on recovery success.
The FBI has requested that anyone possessing information regarding the perpetrators or associated transactions reach out to a local field office. Information can also be submitted through its Internet Crime Complaint Center.
In a November 2 message on X, Zhao highlighted that the agencies and industry collaborators mobilized within minutes of discovering the attack.
“Your speed, expertise, and dedication helped contain the damage and reduce the risk of potential ripple effects across crypto and, may I say, even the broader financial markets,” Zhao wrote.
Get 3 Free Stock Ebooks
Discover top-performing stocks in AI, Crypto, and Technology with expert analysis.
- Top 10 AI Stocks - Leading AI companies
- Top 10 Crypto Stocks - Blockchain leaders
- Top 10 Tech Stocks - Tech giants
