Photo via Al Jazeera

FBI blames North Korea for record $6.3bn crypto heist

Read the original at Al Jazeera ↗
Cite

Al Jazeera Staff. (2026, November 1). FBI blames North Korea for record $6.3bn crypto heist. Al Jazeera. https://www.aljazeera.com/news/2026/11/1/fbi-blames-north-korea-for-record-6-3bn-crypto-heist?traffic_source=rss

Dated from the outlet's own feed. Check the original for its byline.

Al Jazeera · collected 2026-11-01 · by Al Jazeera Staff

Quick Summary

The FBI has linked North Korea to a theft of $6.3 billion in cryptocurrency from the exchange Binance, with malicious actors converting much of it into Ethereum for laundering purposes. The hack is attributed to the group TraderTraitor, which was also responsible for a $1.5 billion theft last year from Bybit. In response, Binance has replaced 90% of the stolen assets using its Secure Asset Fund for Users and other reserves, aiming to reimburse users without financial impact on them.
Written by AI on 2026-11-01, from this article's own text only (the story summary below draws on all the coverage).

AI analysis

Story summary

On October 29, Binance, the world’s largest cryptocurrency exchange, reported a potential security issue that may have been caused by a hack, leading to firms freezing over $6.3 billion in digital assets. Tether and Circle, major stablecoin issuers, froze more than $1.5 billion and approximately $2.38 billion, respectively, to prevent further loss. Binance’s founder, Yi He, confirmed that the incident likely involved a hack on their platform. The FBI later announced that North Korea was responsible for the theft of over $6 billion in virtual assets from Binance. As of November 1, Binance stated it had replaced 90% of the stolen amount, with the remaining 10% expected to take longer due to liquidity issues.

Written for “FBI Blames North Korea for Binance Hack” on 2026-11-01, grounded in this article and the 59 other(s) covering the same event.
Why this leaning score
This article does not take a side on a contested political question, so it has no leaning score. That is an answer rather than a gap: a match report or a rescue can be warmly or critically written without being left or right, and scoring it anyway is how approval of a subject gets recorded as a political position.
No political leaning scored for article 120603 · logged 2026-11-01

Story

📰 FBI Blames North Korea for Binance Hack
World · 60 article(s) covering the same event. Compare every outlet's account →

Compared with similar articles

This article reads unscored and hedges 13% of its claims. Each row says how that neighbour differs.
Deutsche Welle
Hedges 2 of 14 claims Outlet record 95/100
The Straits Times
Hedges 2 of 17 claims Outlet record 66/100
The Hindu
⚖️ Leans strongly right Hedges 0 of 16 claims Outlet record 77/100
South China Morning Post
Hedges 0 of 3 claims Outlet record 64/100
ABC News (AU)
Hedges 2 of 18 claims Outlet record 68/100
CBS News
Hedges 0 of 13 claims Outlet record 66/100
“The articles describe different events: one about sanctions against North Koreans and Russians involved in an IT worker fraud scheme, and another about a $6.3 billion crypto heist linked to North Korea.”
The Sydney Morning Herald
Hedges 7 of 28 claims Outlet record 61/100
Toronto Star
Hedges 0 of 24 claims Outlet record 64/100
CBC News
Hedges 2 of 27 claims Outlet record 60/100
How this article was measured signals, leaning charts, publisher record, byline, topics and claims

Signals How these are calculated →

Claims extracted
15
sentences that state something as happening or true
Uncertain
13%
2 of 15 hedged ("reportedly", "may", "according to")
Leaning
not political
takes no side on a contested political question
Publisher signals
60/100
Al Jazeera's corrections and hedging, across everything collected from it. Not a measure of accuracy.
Outlets on this story
60
World
Same framing elsewhere
1
articles that frame the event the way this one does
Analyzed 2026-11-01 · how these are computed

How this is being covered How these are calculated →

Article leaning vs. publisher reliability
Source leaning vs. consistency

Publisher

Al Jazeera · 4571 article(s) · 2 correction(s) detected
Running correction rate · 2 correction(s)

Who wrote this

Al Jazeera Staff
797 article(s) here · 1 carrying a prediction
🔮 All of them will receive the assistance they need,” Ukrainian President Volodymyr Zelenskyy wrote on X, thanking the United States and the first lady for mediating.
🔮 According to the statement, the assets are expected to be “further laundered” in stages.
2026-11-01 · assertive framing · FBI blames North Korea for record $6.3bn crypto heist
🔮 Protesters at Saturday’s rally told the AFP news agency this may be the “last chance for real change” and that Netanyahu, Israel’s longest-serving prime minister, is a “great manipulator”.
🔮 In 2019, he faced federal charges related to sex trafficking, but he was found dead in his New York City jail cell before he could be brought to trial.
🔮 Dutch authorities will open an investigation into the case on Sunday.
🔮 The lawsuit is unfolding in the final days before Tuesday’s pivotal midterm elections, which will decide which party controls the US Congress, as well as key state and local offices.
🔮 The current outbreak emerged in the Democratic Republic of the Congo (DRC) in May.
🔮 Otherwise, the lawsuit warns, Trump could claim that pausing construction already under way would pose a national security risk, as he has done with other controversial projects in the past.
🔮 In Alaska, a controversy is unfolding over whether two Senate candidates with roughly the same name will cancel each other out.
🔮 Demonstrators in both London and Edinburgh could be seen holding placards reading “I oppose genocide.
Wire or desk byline, not an individual reporter.
Also by Al Jazeera Staff
Nothing else under this byline is closely related to this article, so these are simply their most recent.
All 797 articles by Al Jazeera Staff →

Topics

3Russia Binance FBI Israel North Korea

Subjects

Binance ORG · 8× FBI ORG · 3× North Korea GPE · 2× 3Netanyahu PERSON · 1× 3Russia GPE · 1× Bybit ORG · 1× Futures Insurance Fund ORG · 1× Israel GPE · 1× TraderTraitor ORG · 1× Ukraine GPE · 1×

Narrative

Recommended Stories list of 3 items- list 1 of 3Netanyahu’s pitch: Can Israel use crypto to evade economic sanctions? - list 2 of 3Tracking the money: The biggest donors in the 2026 US midterm elections - list 3 of 3Russia jails IT worker for 13 years for donating money to Ukraine The US agency blamed the operation specifically on a group called TraderTraitor, the same group blamed for a $1.5bn theft from the Bybit platform in February last year.
framing: assertive · carried by 1 article(s) · first seen 2026-11-01
🔮 According to the statement, the assets are expected to be “further laundered” in stages.
2026-11-01 · Al Jazeera
FBI blames North Korea for record $6.3bn crypto heist · assertive framing

Claims (15 extracted, 2 hedged)

The FBI has linked North Korea to the theft of a record $6.3bn in virtual assets from cryptocurrency exchange Binance. asserted
FBI → link → Binance
Malicious actors from North Korea were observed laundering the stolen assets by converting them primarily into the cryptocurrency Ethereum, the FBI said in a statement on Saturday. asserted
FBI → observe → Saturday
Recommended Stories list of 3 items- list 1 of 3Netanyahu’s pitch: Can Israel use crypto to evade economic sanctions? - list 2 of 3Tracking the money: The biggest donors in the 2026 US midterm elections - list 3 of 3Russia jails IT worker for 13 years for donating money to Ukraine The US agency blamed the operation specifically on a group called TraderTraitor, the same group blamed for a $1.5bn theft from the Bybit platform in February last year. asserted
agency → use → February
According to the statement, the assets are expected to be “further laundered” in stages. uncertain
assets → accord → stages
The FBI called on virtual asset service providers to block transactions being used in the latest laundering operation, providing the suspected digital addresses to watch for. asserted
FBI → call → addresses
In a separate statement on Saturday, Binance said it has replaced 90 percent of the amount stolen by using company money to buy new tokens. asserted
it → say → tokens
The remaining 10 percent consists of less liquid tokens, meaning they may take longer to buy, it added. uncertain
it → consist → tokens
“We will continue to buy the remaining relevant token assets… until the covered amount reaches 100 [percent] for all tokens. asserted
amount → continue → tokens
Binance will absorb the financial impact of these stolen funds, not our users,” the company said on X. asserted
company → absorb → X.
The money spent re-buying tokens came from a $1bn Secure Asset Fund for Users (SAFU), a Bitcoin reserve fund Binance holds to protect customers in the event of security breaches, as well as some of its Futures Insurance Fund and the company’s corporate treasury. asserted
Binance → spend → Fund
Crypto prices fell on Friday, as Binance, which runs the world’s largest crypto exchange, sought to reassure customers their funds were safe. asserted
funds → fall → customers
Binance co-CEO Richard Teng said on Friday that the breach was a “complex attack” involving a compromised laptop and malicious software designed to delete evidence of its activity, making it hard to trace and investigate. asserted
it → say → activity
After the hack, the exchange stopped allowing customers to withdraw their funds. asserted
customers → stop → funds
Binance said later on Saturday that it was on track to reopen withdrawals on Sunday. asserted
it → say → Sunday
Binance also announced the publication of a new proof-of-reserves snapshot, allowing users to independently verify that their assets were backed at a minimum 1:1 ratio. asserted
assets → announce → ratio
💬Give feedback
🕘History 🎫Support