← DOOMRADAR
Cyber & digital services58 / 100 · Doom score

Binance faces $6.3 billion crypto theft as North Korea rejects FBI allegation

Binance customers withdrew a net $4.72 billion after last week’s reported hack, while North Korea denied the FBI’s claim that it was responsible. The exchange says outflows have normalised, but the alleged theft would rank among the largest financial heists ever reported.

By DoomRadar · Published on DoomRadar . Updated .

Geographic context

Places in the report

North Korea, South KoreaRussiaNorth KoreaSouth KoreaMongoliaPeople's Republic of ChinaJapanNorth KoreaSouth Korea

Countries named in the cited reporting. Highlighting does not show the area affected. Map: Natural Earth.

Event timeline2 Nov → 3 Nov

Dates stated in the reported details, separate from article publication times.

  1. 2 Nov

    Customer withdrawals reached a net $4.72 billion by 2 November after the incident.

    [1] · Reported detail
  2. 3 Nov

    Binance, described as the world’s largest cryptocurrency exchange, was hit by a hack in the week before 3 November.

    [1][2] · Reported detail
  3. 3 Nov

    Binance’s co-CEO said on 3 November that outflows had normalised and that the company was in “very strong financial health.”

    [1] · Reported detail
How the effects could reach youConditional effectsConditional impact diagram. Reported development: Binance faces $6.3 billion crypto theft as North Korea rejects FBI allegation. digital: Customers may face renewed pressure to withdraw funds or delays moving assets if confidence deteriorates. Only if: Binance would need to experience another sustained surge in withdrawals or disclose service problems. security: Cryptocurrency platforms and users could face greater scrutiny or additional restrictions on transfers linked to North Korean wallets. Only if: Authorities would need to take follow-up enforcement or regulatory action; none is established here. These are possible effects, not probabilities or a forecast.
A possible pathway, conditional on the factors shown.Reported basis: [1][2]

Based on two sources with available article excerpts. Source-linked claims are not independent confirmation.

Event date: The Binance hack occurred in the week before 3 November 2026; customer withdrawals were measured through 2 November 2026. [1][2]

What happened

Binance, described as the world’s largest cryptocurrency exchange, was hit by a hack in the week before 3 November. The reported theft involved $6.3 billion in cryptocurrency, although the excerpts do not establish the precise attack method or which assets were taken. [1][2]

References for this detail (2)

The FBI alleged that North Korea was responsible for the hack. Kim Yo-jong rejected the accusation in a statement carried by North Korea’s state-run Korean Central News Agency, calling the US effort a “trite provocation” and accusing Washington of trying to damage the country’s image. [2][1]

References for this detail (2)

The scale of the alleged theft is large relative to North Korea’s economy. Reuters reported that South Korea’s central bank estimated North Korea’s 2025 gross domestic product at 47.18 trillion won, making the alleged Binance theft equivalent to about one-sixth of that output. [1]

References for this detail (1)

Context from the sources

Elliptic estimated that North Korea had stolen $7.6 billion in cryptocurrency during 2026, more than in any previous year. Chainalysis separately estimated that North Korea was linked to 89% of crypto-hack losses in 2026, compared with 15% in 2021; these are analysts’ estimates, not established findings about the Binance case. [1]

Explore the sources and reporting timeline

2 source links · 2 domains

These counts describe the references, not independent confirmations. Different outlets can repeat the same original report.

Source timeline

Oldest to newest among the available source dates, not a chronology of the incident. Article publication dates come from the source; other recorded dates may reflect when a link was found.

  1. Recorded source date: Nov 3, 2026, 10:01 AM UTC[2] North Korea slams US for 'trite provocation,' denies responsibility for Binance hackenglish.hani.co.krReferenced for: detail 1, detail 4
  2. Recorded source date: Nov 3, 2026, 10:17 AM UTC[1] Binance Says Outflows Normalised as North Korea Rejects US Allegation Over Heistchronicle.luReferenced for: detail 1, detail 2, detail 3, detail 4, detail 5

Questions answered by the reporting

How much did Binance customers withdraw after the hack?

Customers had withdrawn a net $4.72 billion by 2 November, according to Reuters reporting. [1]

Who is accused of carrying out the theft?

The FBI attributed the hack to North Korea, but Pyongyang has rejected that allegation. [1][2]

What this could mean for you

Digital services

Customers may face renewed pressure to withdraw funds or delays moving assets if confidence deteriorates.

A major theft can trigger concentrated outflows and operational strain at the affected exchange.

Reported basis: [1] · The possible effect is interpretation.

Depends on: Binance would need to experience another sustained surge in withdrawals or disclose service problems.

Safety

Cryptocurrency platforms and users could face greater scrutiny or additional restrictions on transfers linked to North Korean wallets.

The FBI’s attribution, if adopted by regulators or governments, could intensify tracking and compliance controls around the alleged proceeds.

Reported basis: [2][1] · The possible effect is interpretation.

Depends on: Authorities would need to take follow-up enforcement or regulatory action; none is established here.

Possible time frame: months, if those conditions hold.

Possible consequences, not a forecast. Their relevance depends on your location and the conditions above.

For your country

Choose a country to check how this event could affect you.

What changes the outlook

Risk increases if…

A renewed surge in Binance withdrawals or evidence that the exchange cannot meet customer redemption demands would deepen the immediate risk.

Confirmation of further stolen funds, unrecovered assets or new North Korean-linked transactions would expand the incident’s reach.

Pressure eases if…

Binance maintaining normalised outflows while demonstrating that customers can access and withdraw funds would reduce immediate confidence pressure.

Recovery or freezing of stolen assets would limit the financial damage, though no such recovery is established in the reporting.

Still unclear

The technical method of the Binance hack and the assets taken are not established in the excerpts.

It is unclear whether any stolen cryptocurrency has been recovered or whether customers incurred unreimbursed losses.

Market implications

Market impact

Loading market analysis...
Sources (2)

References for the reported details. Separate links do not necessarily mean independent confirmation.

First tracked by DoomRadar: . AI-assisted analysis · . Based on linked headlines and available excerpts. Methodology · Report an error.