Finance
“On Thursday, Binance, the world's largest crypto exchange, was hacked and more than $6 billion in crypto was wiped out, with crypto tracing firms suggesting North Korean hackers were responsible.”
Plain restatementOn Thursday 29 October 2026, Binance, the largest crypto exchange by trading volume, suffered a security breach in which more than $6 billion in crypto assets was taken; blockchain analytics firms have attributed the attack to North Korean state-linked hackers.
General information only - not financial advice.
This checks out in its essentials. Binance has itself confirmed that its hot wallets were compromised at about 20:05 UTC on Thursday 29 October 2026, with a loss of roughly $6.3 billion in token assets. Independent blockchain tracing firms put the figure a little higher, at about $6.36 billion to $6.43 billion, and all describe it as the largest crypto theft on record. TRM Labs and Chainalysis have attributed the attack to a North Korean state-linked group called TraderTraitor, and Elliptic says North Korean involvement is likely, so the claim's cautious wording that tracing firms are "suggesting" North Korean responsibility is a fair description of where the evidence stands. The one piece of missing context is the phrase "wiped out." Binance says it will absorb the loss rather than its users, says it had restored backing for 90% of affected assets as of 31 October 2026, and reported about $3 billion of the stolen funds frozen. Still open: the final loss figure, the full cause, how much is ultimately recovered, and the fact that the North Korea attribution comes from private analytics firms rather than from a court or a government designation. General information only, not financial advice.
On Thursday, Binance, the [drifted from the evidence:] world's largest crypto exchange, [drifted from the evidence:] was hacked and more than $6 billion in crypto was [drifted from the evidence:] wiped out, with crypto tracing firms [drifted from the evidence:] suggesting North Korean hackers [drifted from the evidence:] were responsible.
On Thursday [added by the neutral restatement:] 29 October 2026, Binance, the largest crypto exchange [added by the neutral restatement:] by trading volume, suffered a security breach in which more than $6 billion in crypto [added by the neutral restatement:] assets was [added by the neutral restatement:] taken; blockchain analytics firms [added by the neutral restatement:] have attributed the attack to North Korean [added by the neutral restatement:] state-linked hackers.
Red-tinted words in the claim drifted from the evidence. Green-tinted words are what a neutral restatement needs.
The trace / claim to source
- A security breach at Binance did occur on Thursday 29 October 2026. Binance itself states its hot wallets were compromised at around 2026-10-29 20:05 UTC.
- The scale exceeds $6 billion. Binance put the loss at approximately $6.3 billion in token assets, and independent tracers put it at $6.36bn to $6.43bn as of 30 to 31 October 2026.
- It is described as the largest crypto theft on record. Elliptic reports it as more than four times the $1.46 billion stolen from Bybit in 2025.
- Tracing firms do point to North Korea. TRM Labs and Chainalysis attribute the hack to the North Korean state-backed group TraderTraitor. The claim's word "suggesting" matches the hedged language the firms themselves use.
- Binance is the largest crypto exchange by trading volume, per aggregated exchange data for Q3 2026 and December 2025 as cited above.
- The phrase "wiped out" is left to stand alone, with no mention that the exchange says customers are being made whole. Binance states it will absorb the financial impact rather than its users, and as of 31 October 2026 says it has restored backing for 90% of affected assets using SAFU, its Futures insurance fund and corporate treasury. A reader of the claim alone could reasonably infer that $6 billion of customer balances were destroyed. On the available evidence the assets were moved to attacker-controlled addresses, roughly $3 billion was frozen, and the exchange is covering the shortfall. Whether that coverage completes is a separate open question.
- Date context mismatch (secondary claim, in the caption rather than the headline claim): the caption describes Ilya Lichtenstein as having "once stole $4.5 billion worth of crypto." The DOJ case record states that in August 2016 Lichtenstein hacked Bitfinex and stole approximately 120,000 bitcoin, then laundered the proceeds with his wife Heather Morgan. The 2016 breach involved 119,754 bitcoin, then worth approximately $71 million. The $4.5 billion figure is the later valuation attached to the laundering case, not the value at the time of the theft. CNN itself reported in 2023 that the couple pleaded guilty to a $4.5 billion money-laundering scheme linked to the 2016 Bitfinex hack.
- Precision gap on the number: "more than $6 billion" is accurate but the three published figures differ ($6.3bn company estimate, $6.36bn TRM, $6.43bn Elliptic) because they are dollar valuations of multi-token holdings struck at different moments. The claim presents a single round figure without noting it is an estimate that moves with token prices.
- The final loss figure is not settled. Binance's own number and the two tracing firms' numbers diverge by roughly $130 million, and token-price movement changes any dollar total.
- Attribution to North Korea is an analytical assessment by private firms, not a court finding or a sanctions designation. Elliptic frames its own conclusion as what it believes is likely. No criminal charge or government attribution establishing responsibility was found as of 31 October 2026.
- The cause is still under investigation and Binance's account has changed. Binance's co-CEO initially pointed to a compromised DevOps engineer's laptop rather than a key leak, and Binance later said its investigation uncovered additional points of breach but did not confirm where.
- How much of the stolen crypto is ultimately recovered is unresolved. Roughly $3 billion was reported frozen as of 30 October 2026; the status of the remainder is open.
- Whether withdrawals resume as scheduled and whether the remaining 10% of coverage is completed had not occurred as of the verdict date.
Binance's own statement confirms the event and the scale. In its Security Incident Update #2, Binance said that at around 2026-10-29 20:05 UTC its hot wallets were compromised, resulting in a loss of approximately $6.3 billion USD worth of token assets. Independent tracing firms put the figure slightly higher: TRM Labs states that on October 29, 2026 an attacker moved approximately USD 6.36 billion out of Binance wallets on ten blockchains, most of it in about 20 minutes starting at 20:05 UTC, while Elliptic's analysis shows $6.43 billion in cryptoassets was stolen on 29 October 2026, more than four times the $1.46 billion stolen from Bybit in 2025, and Elliptic believes North Korean involvement is likely. On attribution, TRM Labs and Chainalysis have both attributed the Binance hack to a North Korean state-backed hacking group called TraderTraitor, which has a history of crypto cyberattacks, and Chainalysis, Elliptic and TRM attributed the attack to North Korean hackers. TRM bases its attribution to TraderTraitor on onchain and offchain intelligence, with evidence pointing to a compromise of Binance's hot wallet signing infrastructure. On what happened to the money afterwards, Binance has said it is absorbing the loss. Binance says it has restored backing for 90% of assets affected by the $6.3 billion hack and plans to resume withdrawals subject to security checks, stating "Binance will absorb the financial impact of these stolen funds, not our users," and tapping its Secure Asset Fund for Users (SAFU) and a portion of its Futures insurance fund. Binance said it has reserved over $6.34 billion in company funds to offset the losses. A portion has been immobilised: Binance said roughly $3 billion has been frozen. On the "largest exchange" descriptor, CoinGecko research records Binance as the largest centralized exchange with a 38.3% market share in December 2025, and a 2026 compilation citing CoinGecko's Q3 2026 report lists Binance at 42.7% of top-10 spot volume in Q3 2026, the largest by a wide margin.
Complete reasoning
The reply is formatted for pasting into the thread where the claim is circulating.