Binance says it has covered 90% of the $6.3bn stolen in a record crypto heist blamed on North Korea
Binance halted all withdrawals after a hack through a single engineer's laptop drained an estimated $6.3bn — surpassing the previous record $1.5bn Bybit breach in 2025.Kim Jong Un, whose country's TraderTraitor unit carried out the Binance raid using access gained through a compromised DevOps engineer's laptop, according to investigators.
Binance co-CEO Richard Teng pledged on Saturday that users will bear none of the financial hit, with the exchange drawing on its $1bn Secure Asset Fund for Users, its Futures insurance fund and its corporate treasury to rebuild balances. The world's biggest crypto exchange halted all withdrawals after Thursday's breach and says it remains on track to reopen them on Sunday. Trump said Friday the US government is "looking at" North Korean involvement, while the Secret Service said agents are working continuously to trace and recover funds.
The remaining 10% consists of less-liquid tokens that "may take longer to source in the required amounts," Binance said.
Blockchain intelligence firms TRM Labs and Chainalysis linked the attack to North Korea's elite TraderTraitor unit with "high confidence," noting similarities to last year's $1.5bn Bybit heist.
Hackers executed the breach in roughly 20 minutes using a compromised engineer's laptop and a self-destruct mechanism designed to wipe evidence.