The FBI, working with the USSS and IRS-CI, reports that the stolen assets are being converted primarily into Ethereum, with further laundering expected through DeFi and instant swap services. The theft of more than $6 billion in virtual assets from Binance occurred on or about October 29, 2026, and is attributed to North Korea's "TraderTraitor" cyber activity. The agencies are urging private sector entities—including THORNode operators, RPC node operators, instant exchanges, DeFi services, and blockchain analytics firms—to block transactions with or derived from the addresses the actors are using. A list of associated addresses has been published.

AI summary of the linked source — not editorial content.

Story signal · how it spread on X · via Elfa

as of
Spread
i
Distinct X and Telegram accounts Elfa counted behind this story’s reports, summed over the thread. Not posts, not impressions.
178 accounts

9 reports
first post
Leviathan +2 d later

BNB reaction
i
Price change from the first post to 24 hours later (Hyperliquid). BTC over the same window is shown so a market-wide move is not mistaken for a reaction to this story. Not advice.
+0.8% 24h after post

$702.39 → $708.26
BTC +0.3% same window

Thread · 8 of 13 events · started 30 Oct 20:01 · 1 consequence · 1 mitigation · last update 2 Nov 15:42
  1. Thread startTrump reportedly looking into Binance hack28 acc.
  2. UpdateTrump says the Binance hack is being looked into as Binance reports it is under control50 acc.
  3. UpdateFBI attributes theft of more than $6 billion in Binance virtual assets to North Korea102 acc.
  4. ConsequenceFBI urges DeFi platforms, including THORSwap, to block transactions tied to Binance exploiters28 acc.
  5. UpdateTrump says he will discuss the reported $6.3 billion Binance hack with North Korea28 acc.
  6. UpdateFBI publishes addresses linked to the North Korean Binance theft and asks the industry to block them5 acc.
  7. UpdateFBI urges THORChain node operators to block transactions linked to Binance hack3 acc.
  8. MitigationRelay pauses some routes to block funds stolen in the Binance hack6 acc.
  9. Leviathan published this article

All times UTC.

Cited posts

  • @TreeNewsFeed Tree NewsFirst reportOn X ↗

    FBI: NORTH KOREA WAS RESPONSIBLE FOR THE THEFT OF MORE THAN $6 BILLION USD IN VIRTUAL ASSETS FROM CRYPTOCURRENCY EXCHANGE BINANCE - RTRS

  • @PhoenixNewsIO Phoenix » PhoenixNews.ioOn X ↗

    FBI: NORTH KOREA WAS RESPONSIBLE FOR THE THEFT OF MORE THAN $6 BILLION USD IN VIRTUAL ASSETS FROM CRYPTOCURRENCY EXCHANGE BINANCE

  • @bwenews 方程式新闻 BWEnews 🏎️On X ↗

    Tree News: FBI: NORTH KOREA WAS RESPONSIBLE FOR THE THEFT OF MORE THAN $6 BILLION USD IN VIRTUAL ASSETS FROM CRYPTOCURRENCY EXCHANGE BINANCE - RTRS Tree News: 美国联邦调查局（FBI）：朝鲜是加密货币交易所 BINANCE 超 60 亿美元虚拟资产被盗事件的幕后黑手 —— 路透社

Show 3 more cited posts
  • @cryptounfolded unfolded.On X ↗

    FBI: NORTH KOREA WAS RESPONSIBLE FOR THE THEFT OF MORE THAN $6 BILLION USD IN VIRTUAL ASSETS FROM CRYPTO EXCHANGE BINANCE

  • @c14english C14 News | ENOn X ↗

    🚨🇺🇸 Just in: The FBI confirmed North Korea was responsible for the theft of more than $6 billion USD in virtual assets from cryptocurrency exchange, Binance. https://t.co/8dKkMkXYk1

  • @martypartymusic MartyPartyOn X ↗

    FBI PRESS STATEMENT: NORTH KOREA WAS RESPONSIBLE FOR THE THEFT OF MORE THAN $6 BILLION USD IN VIRTUAL ASSETS FROM CRYPTOCURRENCY EXCHANGE BINANCE - @Reuters @News_Crypto

172 more accounts posted about this · 9 Telegram channels (no public link)

TradersTrader calls tracked by Elfa · not advice

Positioning · BNB

Open490 open positions · 447 long · 43 short

Tracked accounts lean long about 97% of the time, so a long-heavy book is normal, not a signal. As of 2 Nov 18:32 UTC.

Reaction since the first post

Since 31 Oct 21:28 UTC18 calls opened · 13 long · 5 short

Whole crypto market, not this story

Crowding5th percentile · vs last 28 days, 50 typical
Pulse 24h28/100 · unusualness of new calls, 0–100, 50 typical, higher means more long than usual
Book96.9% long · 10,698 accounts

As of 3 Nov 02:40 UTC.

Social-monitoring data, not investment advice Elfa prices Hyperliquid post text from Xas of

Explore the topic

Loading related coverage…

Explore the full feed

Comments

Loading comments…