Binance absorbs $6.34bn North Korea hack loss, 98% funds restored
Binance confirms North Korea stole $6.34 billion in digital assets during an October 29 cyberattack, but the exchange says it will absorb the full loss rather than pass it to users. The FBI attributed the breach to the Democratic People's Republic of Korea.
The attack wasn't a simple hack—it was a months-long operation. Starting June 2026, North Korean operatives posed as recruiters, tricking Binance engineers into downloading malicious code during fake job interviews. By October 20, they'd compromised internal AI tools and wallet-signing systems, executing the main attack nine days later.
Binance says it has frozen $2.85 billion of the stolen assets and replenished 98% of affected tokens as of October 31, verifiable on their Proof of Reserves page. The company set aside over 100% of required funds to cover remaining losses. Security overhaul includes rebuilt wallet infrastructure, replaced devices, and enhanced AI threat detection.
Binance's security team prevented 57 suspected North Korea-linked attacks this year alone. The exchange is working with law enforcement and blockchain intelligence firms to trace remaining funds, plus engaging independent cybersecurity experts for review.
If you hold assets on Binance, your funds are reportedly safe—but this reveals how sophisticated state-sponsored attacks have become. Will you keep using centralized exchanges, or does this push you toward self-custody wallets despite their own risks?