The FBI confirmed North Korea was responsible for the $6.3 billion Binance crypto hack.
[1]← Week of Oct 25Oct 25 – Oct 31 UTC Every claim links to the posts behind it01 02 03 04 05 06 07 08 09 10 11 12 8 posts on X 1 week
Narrative / Rank 21 / Week of Oct 25 – Oct 31
FBI confirms North Korea's 'TraderTraitor' stole $6.3B from Binance — largest crypto hack in history
Peak / day6tracked accounts
Peak dayTueOct 27 · busiest day in the panel
Rest of X / peak day132distinct accounts outside the panel
Cited claims124 dropped by automated checks
Market—no token attached
Attention
Who was talking, day by day
Tracked paneldistinct tracked accounts / day
Rest of Xdistinct other accounts / day
What happened
The FBI confirmed North Korea was responsible for the $6.3 billion Binance crypto hack. The FBI said North Korea was responsible for the theft of more than $6 billion in virtual assets from Binance on or about October 29, 2026, referred to as 'TraderTraitor', and that the actors were converting stolen assets primarily into Ethereum. The FBI announced North Korea was behind the $6.3 billion hack of Binance, now the largest hack in history, and North Korea was previously accused by the FBI of the $1.5 billion Bybit attack last year and the 2022 theft of $620 million.
+ 9 more in the evidence register ↓Why it matters
The FBI attributing the largest crypto hack in history to a state actor turns this from an exchange security incident into a geopolitical and compliance story: it pulls in North Korea sanctions exposure, Binance's custody and hot-wallet security, and contagion questions for anyone holding assets on centralized exchanges. For a crypto-native audience it also directly connects to the 2025 Bybit hack, making North Korea's crypto-theft operation a repeat, escalating storyline rather than a one-off.
Observed reaction
Mostly alarmed and attention-grabbing rather than price-focused. Amplifiers (@litecointa, @cryptos6_bk10x, @blockhunta) push the FBI/breaking-news framing; @cryptobullart treats it as a record event. A skeptical thread runs through @bitcoinbombadil's RTs, questioning how $6.3B could leave a single laptop across eight networks without triggering exchange controls and framing it as proof that centralized crypto has 'kill switches'. @athanasiusd11's RT pushes a competing view that hackers prefer Monero over ETH for laundering. No price calls; no bullish reaction.
Spread
Where it started and who carried it
- First seen
- Oct 25, 09:06 UTC by @btchydra187
- Accounts
- 19 tracked · 57 elsewhere on X
- Communities
- bitcoin (5), perps trading (3), general ct (3), memecoins solana (3)
- Key accounts
- @blockstargram, @watcherguru, @cryptos6_bk10x, @litecointa, @kg13445545
Explainability
Evidence register
The FBI said North Korea was responsible for the theft of more than $6 billion in virtual assets from Binance on or about October 29, 2026, referred to as 'TraderTraitor', and that the actors were converting stolen assets primarily into Ethereum.
[1]The FBI announced North Korea was behind the $6.3 billion hack of Binance, now the largest hack in history, and North Korea was previously accused by the FBI of the $1.5 billion Bybit attack last year and the 2022 theft of $620 million.
[1]Approximately $8.7 billion was lost to crypto hacks in 2026 so far, with around $7.3 billion from four North Korea-linked incidents including Binance ($6.36B), Bitget (~$387M), KelpDAO (~$293M) and Drift (~$285-295M), about 84% of losses across 322 incidents tracked by DefiLlama as of October 30.
[1]A post argued that hackers prefer Monero over ETH and will swap ETH for XMR because the government and FBI cannot trace that flow.
[1]A post claimed the Pentagon and FBI called on citizens of the US and other nations to stockpile supplies and prepare for a global catastrophe scenario.
[1]Former FBI Deputy Director urged Americans to stockpile emergency supplies.
[1][2]A post said Former FBI deputy chief Dan Bongino recommended food, water-filtration supplies, batteries and an emergency radio, and listed emergency-preparedness stockpile guidance by country.
[1]A post said the worst call of Trump II was the failure to reinforce DOGE with the FBI and intelligence services.
[1]A post discussed Nigerians' perception of the FBI and local law enforcement doing the work the FBI takes credit for.
[1][2]A post said an 'OS' ordered from Ikorodu texted 'I'm coming' instead of 'Am coming', joking 'FBI nice try'.
[1]A post told a fictional story about 'Percival P. Pepperoni', a Bored Trader #4663 character.
[1]Angles
- Explainer thread: what the FBI's 'TraderTraitor' attribution actually says, the ~$6.3B / ~20 minutes / 10 chains details as posted, and how it compares to the $1.5B Bybit hack and 2022's $620M theft — all sourced to the posts, no predictions.
- Exchange-security angle: pull the competing claims (single DevOps laptop across eight networks vs. tier-1 alarms and withdrawal limits), clearly labelled as unverified community skepticism, and ask what hot-wallet and multisig assumptions this stresses.
- Laundering-track angle: use @cryptos6_bk10x's RT of the FBI saying assets are being converted primarily to ETH and @athanasiusd11's counter that Monero is preferred, to explain the on-chain trail debate without naming or accusing any individual of wrongdoing.
In the playbook for Tue, Nov 3 · goes stale fast
Formats in use
- screenshot of the FBI Cyber Branch statement
- breaking-news quote-tweet
- RT of aggregator posts (@WatcherGuru, @KobeissiLetter)
- stat thread with dollar figures per incident
- quote-tweet with skepticism/commentary
Risks
- Hack attribution and dollar amounts are single-source in this dataset — the $6.3B/$6.36B figure comes from the FBI statement and relays of it; mark attribution and totals as reported by the FBI, not independently confirmed by the team.
- The $6.3B number appears only in posts, and the market block here is 'none' — do not assert price impact or give any trade/price framing.
- The 'single DevOps laptop' and 'freeze billions instantly' claims are unverified community allegations from @bitcoinbombadil's RT of @Hannibal9972485; label them as unverified opinion, not fact.
- Several highly-viewed posts in this set are retweets of unrelated engagement around a former FBI official's preparedness warnings — do not fuse that into the Binance hack narrative.
- Avoid amplifying taglines that name or imply negligence by specific Binance staff; stick to what attribution posts state.
- Some posts read as engagement-farming political content (@btchydra187's Oct 25 RT, @realcryptopikin's RTs) — do not repurpose them as hack coverage.
Observed content
Most-engaged posts
RT @flames_collins: OS wey i order from ikorudu just text me “I’m coming” instead of “Am coming” FBI nice try https://t.co/MYZpKctY4gOpen on X →
RT @WatcherGuru: BREAKING: 🇺🇸🇰🇵 FBI confirms North Korea is responsible for the $6,300,000,000 Binance crypto hack. https://t.co/VGlNcWF5zqOpen on X →
RT @FBICyberBranch: The FBI is releasing information advising the Democratic People's Republic of Korea (North Korea) was responsible for the theft of more than $6 billion USD in virtual assets from cryptocurrency exchange, Binance, on or about October 29, 2026. The FBI refers toOpen on X →
RT @remarks: JUST IN: 🇺🇸 Former FBI Deputy Director Dan Bongino tells Americans to take 30-day emergency preparedness warnings seriously. https://t.co/m3B66xC0MLOpen on X →
RT @tabordacrist: 🚨 ALERTA GLOBAL | EL PENTAGANO Y EL FBI LLAMAN A LOS CIUDADANOS DE ESTADOS UNIDOS Y EL RESTO DE NACIONES A ALMACENAR SUMINISTROS Y PREPARARSE PARA UN ESCENARIO DE CATÁSTROFE GLOBAL ¿QUE ESTA PASANDO? ¿QUE ES LO QUE SE VIENE? https://t.co/kAnM5IXA2KOpen on X →
RT @KobeissiLetter: BREAKING: The FBI announces that North Korea was behind the $6.3 billion hack of Binance, now the largest hack in history. North Korean hackers were previously accused by the FBI of some of the biggest crypto hacks. This includes the $1.5 billion Bybit attacOpen on X →
RT @xenocosmography: Worst call of Trump II, by far, has been the failure to back DOGE resolutely, reinforce it with the FBI and intelligence services, pull Palantir into the fight, and use it as the crowbar to prise apart, defund, and roll up the entire progressive deep state.Open on X →
RT @Kalshi: BREAKING: Former FBI Deputy Director urges Americans to stockpile emergency suppliesOpen on X →
History