{
  "id": 17431854,
  "title": "Crypto giant Binance races to recover $6.3bn stolen in hack linked to North Korea",
  "url": "https://urgent.news/2026/10/31/crypto-giant-binance-races-to-recover-6-3bn-stolen-in-hack-linked-to",
  "topic": "finance",
  "section": "Finance & Markets",
  "published": "2026-10-31T16:35:07.000Z",
  "source": {
    "name": "GBC Ghana",
    "slug": "gbc-ghana",
    "url": "https://www.gbcghanaonline.com/technology/crypto-giant-binance-races-to-recover-6-3bn-stolen-in-hack-linked-to-north-korea/2026/"
  },
  "original_language": "en",
  "account": "In a historic digital asset theft, cryptocurrency exchange giant Binance is urgently attempting to recover a staggering $6.3 billion (approx. GHS 73.4 billion) stolen in a sophisticated cyberattack. The company revealed that around half of the missing digital assets, valued at approximately $3 billion (approx. GHS 35.0 billion), have been identified and frozen through coordinated efforts across multiple blockchain platforms and private-sector collaborators. However, a significant portion of the funds remains in the hands of unknown threat actors.\n\nThe breach unfolded swiftly, within a 20-minute timeframe, as funds were transferred across ten distinct blockchain networks beginning around 4 p.m. ET on Thursday. At first, the theft was believed to stem from a compromised laptop of a DevOps engineer. However, a more comprehensive internal investigation uncovered a wider infrastructure intrusion.\n\nBinance's co-CEO, Richard Teng, explained the technical aspects of the breach during public updates, emphasizing that the attack was not perpetrated by a single individual. He detailed the attackers' evasion tactics, stating, \"a self-destruct mechanism that destroyed tooling and traces as they went, making it more difficult for us to trace and investigate.\"\n\nTo prevent further asset movement, Binance temporarily halted platform withdrawals while maintaining deposit infrastructure operational. The exchange announced a $5 billion (approx. GHS 58.3 billion) reserve to cover losses and committed an additional $1.34 billion (approx. GHS 15.6 billion) in cryptocurrencies to meet the total stolen amount. Executives swiftly reassured users that their money remained safe and that Binance would cover all losses.\n\nIntelligence analysis suggests that the attack was carried out by North Korean state-sponsored cyber units. Blockchain analytics firms TRM Labs and Chainalysis have identified technical similarities between this theft and previous incidents linked to Pyongyang's network operations, attributing the attack to the Lazarus Group, a specialized collective operating on behalf of the North Korean regime. Despite North Korea's denials, on-chain transaction flows and defector testimonies contradict these claims, asserting that the country is actively involved in state-sponsored cyber operations to generate revenue for the regime.\n\nU.S. federal authorities are investigating the security breach due to the involvement of dollar-pegged assets like Tether and Circle. The U.S. Secret Service, in collaboration with the U.S. Attorney's Office for the District of Columbia and other law enforcement agencies, is actively working to identify, freeze, trace, and recover the stolen funds. Private stablecoin operators Circle and Tether also assisted authorities by freezing tagged addresses holding the stolen funds across various networks.",
  "summary": "By Nana Karikari, Senior Global Affairs Correspondent In what is being described as the largest digital asset heist in history, global cryptocurrency exchange Binance is racing to recover $6.3 billion (approx. GHS 73.4 billion) stolen in a massive cyberattack. The company confirmed that roughly half of the missing digital assets—approximately $3 billion (approx. GHS 35.0 […]",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 6,
    "also_reported_by": [
      {
        "outlet": "CNA - Business",
        "title": "Crypto exchanges call for quick moves to bolster defenses after Binance heist",
        "url": "https://urgent.news/2026/10/31/crypto-exchanges-call-for-quick-moves-to-bolster-defenses-after",
        "published": "2026-10-31T00:26:58.000Z"
      },
      {
        "outlet": "Investing.com",
        "title": "Crypto exchanges call for quick moves to bolster defenses after Binance heist",
        "url": "https://urgent.news/2026/10/31/crypto-exchanges-call-for-quick-moves-to-bolster-defenses-after-17367506",
        "published": "2026-10-31T00:30:40.000Z"
      },
      {
        "outlet": "Japan Times",
        "title": "Crypto exchanges call for quick moves to bolster defenses after Binance heist",
        "url": "https://urgent.news/2026/10/31/crypto-exchanges-call-for-quick-moves-to-bolster-defenses-after-17359091",
        "published": "2026-10-31T02:47:00.000Z"
      },
      {
        "outlet": "The Jakarta Post",
        "title": "Crypto exchanges call for quick moves to bolster defenses after Binance heist",
        "url": "https://urgent.news/2026/10/31/crypto-exchanges-call-for-quick-moves-to-bolster-defenses-after-17343627",
        "published": "2026-10-31T05:12:12.000Z"
      },
      {
        "outlet": "Times of India",
        "title": "‘Binance will absorb impact, not users’: Crypto giant sets aside $6.34 bn to cover losses",
        "url": "https://urgent.news/2026/10/31/binance-will-absorb-impact-not-users-crypto-giant-sets-aside-6-34-bn",
        "published": "2026-10-31T10:39:09.000Z"
      }
    ]
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}