Binance Promises to Make Users Whole as North Korea Faces Blame for Crypto’s Biggest Heist

Binance Promises to Make Users Whole as North Korea Faces Blame for Crypto’s Biggest Heist
A record-breaking cryptocurrency theft has put Binance’s security and the industry’s resilience under scrutiny, even as the exchange races to reassure customers that they will not bear the cost. The FBI, meanwhile, has framed the attack as part of North Korea’s broader effort to turn cybercrime into state revenue.

The FBI said North Korean hackers operating under the name TraderTraitor stole roughly $6.3 billion from Binance and had begun converting the assets into Ethereum. The bureau warned that further laundering was likely and urged virtual-asset companies to block transactions tied to known addresses. It described the activity as “malicious cyber activity” by a North Korean actor.

That account places the incident primarily in the realm of national security and sanctions evasion. Binance’s account is narrower and more operational: the exchange says its priority is replenishing customer assets and restoring withdrawals after security checks. It reported that as much as 90% of the stolen tokens had been covered, with the remaining 10% consisting largely of less-liquid assets that could take longer to acquire.

The two perspectives overlap on the scale of the theft but diverge over what matters most. U.S. officials and blockchain investigators emphasize attribution and preventing laundering; Binance emphasizes containment, liquidity and customer protection. The company said, “Binance will absorb the financial impact of these stolen funds, not our users,” while promising to reach full coverage and resume withdrawals, subject to security checks.

The unanswered question is how the breach occurred. Binance initially pointed to a compromised developer’s laptop and unauthorized withdrawal transactions, but co-CEO Richard Teng later said the attack involved a more complex process. That uncertainty leaves the exchange facing a credibility test: covering losses may calm customers, but it does not resolve concerns about the security architecture that allowed the largest crypto theft on record.