Trump Says US Investigating Whether North Korea Was Behind $6.3 Billion Binance Hack

Trump Says US Investigating Whether North Korea Was Behind $6.3 Billion Binance Hack

The United States is investigating whether North Korea was behind the massive $6.3 billion Binance hack, President Donald Trump said on October 30. The cyberattack has become one of the biggest security crises in cryptocurrency history, while blockchain intelligence companies have already pointed strongly toward a North Korean hacking group. The investigation comes as Binance works to freeze stolen assets, restore normal services and reassure customers that their funds are protected.

What Happened in the Binance Hack?

Hackers stole approximately $6.3 billion in cryptocurrency from Binance, the world's largest crypto exchange, in an attack that unfolded with extraordinary speed. Blockchain intelligence firm TRM Labs estimated that an attacker moved around $6.36 billion from Binance wallets across 10 blockchains, with most of the transfers taking place in roughly 20 minutes. The attack appears to have targeted Binance's transaction-signing infrastructure and hot wallets, which are connected to the internet and used to process transactions.

Binance initially said its investigation indicated that a compromised laptop may have provided attackers with access to an internal service. The company later discovered additional breach points, suggesting that the incident was more complicated than a single compromised device. Binance suspended withdrawals while investigating the incident and has said that customer funds are safe and that it will cover the losses.

Why North Korea Is Being Investigated

Several blockchain intelligence companies believe the attack is connected to Trader Traitor, a North Korean hacking unit associated with major cryptocurrency thefts. TRM Labs said it had high confidence in its attribution, while Chainalysis also assessed that the attack was likely carried out by the same group. Researchers identified similarities between the Binance attack and earlier operations linked to North Korean hackers, including the 2025 theft from crypto exchange Bybit.

However, the North Korean connection has not yet been formally confirmed by the US government. Trump's comments are therefore significant because Washington is examining the attribution independently rather than simply accepting the conclusions of private blockchain investigators. Establishing responsibility for a state-linked cyberattack can have major diplomatic and national-security consequences.

Billions of Dollars Have Already Been Frozen

One unusual feature of the incident is the speed with which some stolen cryptocurrency was identified and frozen. Binance said it had worked with blockchain partners to freeze roughly $3 billion of affected assets. Stablecoin companies and other crypto firms have played an important role because certain digital tokens can be frozen when suspicious transactions are identified.

Still, freezing assets does not mean all of the stolen money will automatically be recovered. Attackers have been moving cryptocurrency across different networks and converting some assets into tokens that are harder for issuers to freeze. Investigators are continuing to track the money through blockchain records.

What Binance Says About Customer Funds

Binance has attempted to reassure users that the enormous theft will not become a direct financial loss for customers. The company has said it will cover the losses, while reports indicate it has reserved more than $6.34 billion in company funds for that purpose. The exchange is also working to restore withdrawals and provide additional information about the security incident.

The hack nevertheless raises wider concerns about cryptocurrency security. If attackers can exploit the internal systems of one of the world's largest exchanges, investors may question how smaller platforms protect billions of dollars in digital assets.

What Happens Next?

The investigation will now focus on identifying the attackers, recovering as much cryptocurrency as possible and determining exactly how Binance's systems were compromised. US authorities may also examine whether the attack was connected to North Korea's broader cyber-financing activities.

For cryptocurrency investors, the Binance hack is a major warning that digital assets may offer financial freedom, but they also create significant cybersecurity risks. The final US determination about North Korea's involvement could influence future sanctions, cryptocurrency regulation and international efforts to combat state-sponsored cybercrime.

Conclusion

The $6.3 billion Binance hack has shocked the cryptocurrency industry and triggered a major investigation into possible North Korean involvement. While TRM Labs and Chainalysis have linked the attack to the North Korean Trader Traitor group, US officials have not yet formally confirmed the attribution. Binance says customer funds are protected and that it will cover the losses, while billions of dollars in affected cryptocurrency have already been frozen.

The incident could ultimately become a turning point for cryptocurrency security. How much money investigators recover, how Binance strengthens its systems and whether Washington confirms North Korean responsibility will determine what happens next.