What happened, what recovered, and what customers can do
Binance reported that attackers stole roughly $6.3 billion in crypto assets in late October 2026.
In an October 31 alert, the FBI attributed the attack to North Korea-linked TraderTraitor actors. This is the bureau’s assessment.
Binance temporarily paused withdrawals, then began restoring access to major assets in phases on November 1.
Binance said it had covered about 95% of stolen assets. Covering losses is not the same as recovering every stolen token.
Use a unique password and authenticator-based 2FA, check active sessions, and remove unknown API keys or connected apps.
Ignore unsolicited “refund” messages. Never share seed phrases, private keys or verification codes with anyone.
Verify withdrawal status inside the official Binance app and support channels. Do not assume all networks or assets have reopened.