Binance says it has replenished 90% of the $6.3bn stolen in a record heist blamed on North Korean hackers
Binance halted all withdrawals after a hack through a single engineer's laptop drained an estimated $6.3bn — surpassing the previous record $1.5bn Bybit breach in 2025.Kim Jong Un, whose country's TraderTraitor unit carried out the Binance raid using access gained through a compromised DevOps engineer's laptop, according to investigators.
Binance co-CEO Richard Teng confirmed on Saturday that the exchange has set aside $6.34 billion in company funds to make users whole, drawing on its Secure Asset Fund for Users, its Futures insurance fund, and its corporate treasury. Withdrawals remain suspended but Binance says it is on track to reopen them on Sunday 1 November.
The remaining 10% consists of less liquid tokens that may take longer to source, but Teng pledged: 'Our users will not bear the financial impact of this incident.'
The $6.3bn heist — executed in roughly 20 minutes via a compromised engineer's laptop — is believed to be the largest crypto theft ever, eclipsing the $1.5bn Bybit hack in 2025.
North Korean elite hacking unit TraderTraitor is blamed, with TRM Labs saying it holds 'high confidence' in that attribution; Trump said on Friday: 'We're looking at that.'