The FBI says North Korean state-linked hackers were behind a major Binance crypto theft of about $6.3 billion, which occurred on or around October 29. The bureau identified the operation as “malicious cyber activity” carried out by an entity it calls TraderTraitor, which it also connects to an earlier $1.5 billion Bybit hack. Outlets report that the FBI observed how stolen assets were moved and prepared for laundering.

Several outlets also note Binance’s immediate operational response after the theft. Al Jazeera and Vanguard say Binance resumes withdrawals after the incident and that it had frozen large sums of assets. Other coverage focuses on the wider mechanics described by the FBI, including conversions involving Ethereum and subsequent laundering steps using DeFi and instant swap services.

While outlets largely align on the FBI’s attribution to North Korea and the TraderTraitor name, they vary in emphasis—some highlight the size of the hack and the “biggest” framing, while others foreground Binance’s post-incident actions and user-facing recovery steps. A few outlets add separate reporting around the attacker’s alleged missteps, though these are not presented in the shared FBI attribution framing.