Binance resumes Bitcoin withdrawals after $6.3bn North Korea-linked heist
Source: DW News · All DW News reports
Unlock the full scoreboard
Letter grade, factuality, lean, and rationales — free with registration. No card required.
See grades free How grading works
Already have an account? Sign in. The full report below is free to read.
Disagree with this grade or political lean?
Flagging is open to every reader with a free account. Sign in or create one to dispute this report.
Topics in this report
Summary
The DW News segment reports on Binance resuming phased withdrawals, starting with Bitcoin, three days after a record $6.3 billion crypto theft on October 29, 2026. It covers the FBI's attribution to North Korea's TraderTraitor (also called Lazarus Group) hacking unit, Binance's claim of covering 95% of losses from its reserves without passing costs to users, net outflows of $3.5 billion (about 2% of assets), and upcoming proof-of-reserves report. Cybersecurity expert Jake Moore discusses the attack's scale, potential precedent for future hacks using AI and social engineering, challenges in tracing and recovering laundered funds, and the need for better multi-layered security.
The sourcing relies on the FBI statement, Binance announcements, and Moore's analysis from ESCT; no independent audit of the 95% coverage is cited, with the proof-of-reserves promised for verification. The throughline emphasizes both immediate recovery efforts and long-term uncertainty for the crypto industry.
Editorial Assessment
Claims hold up well against blockchain analytics from Elliptic, TRM Labs, and Chainalysis plus official FBI statements, confirming the theft as the largest on record—roughly four times the prior Bybit hack—and North Korea's role via consistent TTPs and on-chain patterns. Viewers get a clear picture of Binance absorbing the hit via its SAFU fund and corporate reserves to maintain trust, but the segment accurately flags that the 95% replenishment (later reports show progression from 80-90%) lacks third-party verification until the proof-of-reserves publishes. Missing context includes the attack vector (likely a compromised engineer laptop enabling unauthorized transactions via pre-signed approvals on Ethereum) and that roughly $3bn was frozen early by industry partners, reducing net loss impact. The expert's pessimism about future attacks and recovery is well-founded given North Korea's history, but framing as potentially 'small' in the future could amplify fear without noting improving industry defenses and tracing tools. Overall, a solid explainer that avoids hype while highlighting systemic risks in centralized exchanges.
Key Moments
Binance suffered the biggest crypto heist in history with over $6 billion stolen in 20 minutes by North Korea's Trader Trader group
FBI, Elliptic, TRM Labs, and Chainalysis confirm ~$6.3-6.43bn stolen across 10 blockchains in ~20-30 minutes by TraderTraitor (Lazarus-linked); prior record was Bybit's $1.5bn in 2025.
Binance has covered about 95% of losses from its reserves; claim not independently verified
Binance statements and updates report progressing from 80-90% to 95% using corporate funds/SAFU with specific tokens at 100% backing; new PoR snapshot taken Oct 31 with full ZK-proof expected Nov 3 for user verification.
Resumption of withdrawals led to net outflows of $3.5 billion, only 2% of total assets under management
Reports from DefiLlama, Telegraph, Globe and Mail cite $3.5-4.3bn outflows post-resumption on Nov 1; Binance assets exceed $150-170bn, making the percentage accurate.
Stolen assets can be traced but recovery is difficult due to laundering techniques; unlikely to lead to arrests
Expert accurately describes blockchain traceability limitations, 'washing' via swaps/exchanges, and challenges with state actors like North Korea; FBI has issued wallet addresses for blocking but few arrests in prior cases.
This may set a precedent as such sophisticated attacks using AI and social engineering will likely happen again
Plausible given history (multiple North Korean hacks) and rising AI tools, but speculative; segment does not provide specific new evidence beyond general trends in crypto targeting.
Notable Concerns
- Minor misnomer of the hacking group as 'Trader Trader' rather than TraderTraitor
- Guest and host repeatedly note the 95% coverage claim is unverified, correctly signaling reliance on Binance's word ahead of proof-of-reserves
- Limited detail on exact attack mechanics or frozen funds, which could give incomplete view of containment efforts
Sources Consulted
- $6.3bn in 30 minutes: how the world’s biggest heist unfolded
- The largest theft in history: North Korea likely behind the $6.4 billion Binance hack | Elliptic
- $6.3 billion Binance hack was likely work of North Korea, blockchain intel firms say
- Investors pull $3.7bn from crypto exchange hacked by North Korea
- FBI says North Korea stole more than $6bn in the Binance hack
- Binance resumes customer withdrawals after record $6.3bn hack
- FBI Says North Korea Behind $6 Billion Binance Crypto Heist
- Binance resumes withdrawals after the largest crypto heist on record | DW News