CYBERSECURITY Fact

FBI Adds TraderTraitor Detail to Binance Theft Attribution

The FBI’s North Korea attribution and Binance’s replacement statement ran on 1 November; this report adds the agency’s description of the group’s alleged conversion of assets into Ether.

BY THE MACRO DESK · Foreman ~ 1 MIN · RECORD E1-E4 · FACTS AS OF 08:50 UTC

The Federal Bureau of Investigation said North Korea was responsible for the theft of more than $6bn in virtual assets from Binance on or about 29 October. The paper reported that attribution on 1 November. [E1]

This edition adds the FBI’s description of the activity: it labeled the actors TraderTraitor and said it had observed them converting stolen tokens to Ether while preparing further laundering. The paper’s 1 November Binance replacement-ledger carried the company’s separate replacement statement. [E4]

Al Jazeera reported that the agency also blamed TraderTraitor for a $1.5bn theft from the Bybit platform in February last year. [E2]

Binance said it had replaced 90% of the amount stolen by using company money to buy new tokens. [E3]

The Record · Provenance for this story

4 references · 2 outlets · 2 independent

E1 theverge.com The Federal Bureau of Investigation (FBI) is releasing information advising the Democratic People’s Republic of Korea (North Korea) was responsible for the theft of more than $6 billion USD in virtual assets from cryptocurrency exchange Binance, on or about October 29, 2026. 2026-11-01

source

Excerpt: "North Korea Responsible for $6 Billion+ Binance Attack The Federal Bureau of Investigation (FBI) is releasing information advising the Democratic People’s Republic of Korea (North Korea) was responsible for the theft of more than $6 billion USD in virtual assets from cryptocurrency exchange Binance, on or about October 29, 2026."
Kind: public url
Source: https://www.theverge.com/tech/1024176/north-korea-binance-crypto-heist
Retrieved: 2026-11-02T04:43:00Z
Used by: Foreman

E2 aljazeera.com The US agency blamed the operation specifically on a group called TraderTraitor, the same group blamed for a $1.5bn theft from the Bybit platform in February last year. 2026-11-01

source

Excerpt: "The US agency blamed the operation specifically on a group called TraderTraitor, the same group blamed for a $1.5bn theft from the Bybit platform in February last year."
Kind: public url
Source: https://www.aljazeera.com/news/2026/11/1/fbi-blames-north-korea-for-record-6-3bn-crypto-heist
Retrieved: 2026-11-02T04:43:00Z
Used by: Foreman

E3 aljazeera.com In a separate statement on Saturday, Binance said it has replaced 90 percent of the amount stolen by using company money to buy new tokens. 2026-11-01

source

Excerpt: "In a separate statement on Saturday, Binance said it has replaced 90 percent of the amount stolen by using company money to buy new tokens."
Kind: public url
Source: https://www.aljazeera.com/news/2026/11/1/fbi-blames-north-korea-for-record-6-3bn-crypto-heist
Retrieved: 2026-11-02T04:43:00Z
Used by: Foreman

E4 theverge.com The FBI labeled the activity “TraderTraitor” and said that it had observed actors it has connected to hack converting the tokens to Ethereum and preparing for further laundering of the funds. 2026-11-01

source

Excerpt: "The FBI labeled the activity “TraderTraitor” and said that it had observed actors it has connected to hack converting the tokens to Ethereum and preparing for further laundering of the funds."
Kind: public url
Source: https://www.theverge.com/tech/1024176/north-korea-binance-crypto-heist
Retrieved: 2026-11-02T04:43:00Z
Used by: Foreman

Filed under Cybersecurity

← Back to The Front Page