North Korea Just Pulled Off the Biggest Crypto Heist in History, Draining $6.4 Billion From Binance in 20 Minutes
Binance suffered a $6.36 billion crypto theft, attributed to North Korea's TraderTraitor unit by TRM Labs. The hack occurred on October 29, draining wallets across ten blockchains. Binance will cover losses using its SAFU fund and company funds. Coinbase (COIN) and Circle (CRCL) shares fell after-hours, while Bitcoin (BTC) and Ethereum (ETH) prices declined.
How this was made
The 30-second read
Why it matters
It frames the event as a custody and internal-process failure risk for centralized exchanges, with partial freezes by issuers and a key uncertainty around whether Binance reopens withdrawals smoothly.
Market read
Traders get a near-term catalyst for crypto liquidity and for crypto-linked equities, centered on withdrawal resumption, freeze effectiveness, and expected sell pressure from unfrozen stolen coins.
What to watch
The article notes multiple totals (TRM, Binance, other firm) and that Coinbase’s move is confounded by same-day earnings, so isolating the hack’s true incremental effect may be difficult.
Background
The article describes a cross-chain attacker emptying Binance wallets across ten blockchains in about 20 minutes, attributed to North Korea’s TraderTraitor unit by TRM Labs.
Ticker impact
Coinbase is cited as having reported third-quarter earnings the same afternoon as the Binance hack, with shares falling after hours.
Likely continued pressure if the hack keeps crypto prices and exchange volumes weak, especially while withdrawals remain paused.
The article links the after-hours drop to both the hack and the earnings report, and argues Coinbase depends on active trading volume.
Circle is named because it froze over $800 million tied to the theft and its stock fell after hours the same day.
Likely downside bias until markets see stablecoin freezing behavior and operational resilience after the incident.
The text highlights both the large freeze action and that stablecoin can be frozen, which can weigh on holder confidence.
Robinhood is mentioned as its shares rose slightly but fell after hours on the same day as the Binance hack.
Choppy to slightly negative near-term if the hack reduces crypto trading activity and retail engagement.
The article does not attribute Robinhood-specific fundamentals to the hack, only shows same-day price moves.
Bitcoin is described as trading around $78,457 early Oct 30, down 1.77% after the Binance theft and potential sell pressure from unfrozen stash.
Likely continued downside or volatility as markets price in potential sell flows from the attacker’s remaining holdings.
The article explicitly ties potential sales from unfrozen BTC to price pressure and reports BTC is already down on the day.
Ethereum holdings of more than 420,000 units are described as about $2.4 billion that no issuer can freeze.
Likely negative bias for ETH if markets expect eventual liquidation of the unfrozen stash.
The article emphasizes the freeze limitation for ETH, which increases the probability of eventual market impact.
Market effects
Centralized-exchange custody and internal-process failures raise perceived counterparty risk, pressuring crypto volumes and exchange-linked equities.
US-listed crypto platforms (Coinbase, Robinhood, Circle) face sentiment spillover from a major offshore exchange incident.
A large cross-chain theft can drive global crypto volatility and increase scrutiny of exchange security and AML controls worldwide.
Counterpoint
If Binance’s security response is credible and withdrawals resume quickly, the market may over-discount the impact and rebound on restored liquidity.
Key entities
- exchangeBinance
Centralized crypto exchange whose wallets were drained across multiple chains; withdrawals paused pending security scan.
- analytics_firmTRM Labs
Blockchain analytics firm attributing the theft to North Korea’s TraderTraitor unit with high confidence.
- threat_actorTraderTraitor
North Korea-linked unit cited as the attacker behind the Binance theft.
- public_companyCoinbase
US-listed crypto platform referenced for after-hours share move coinciding with the hack and its earnings release.
- public_companyCircle
Stablecoin issuer named for freezing over $800 million tied to the theft; stock fell after hours.
