The FBI attributed the October 29 theft of approximately $6.3 billion from Binance to North Korea's TraderTraitor group after attacker-controlled requests caused 17 Binance hot wallets to sign transfers across nine blockchains. Binance said a compromised DevOps engineer's laptop exposed an internal withdrawal service, while on-chain evidence showed no apparent private-key leak. Token issuers and Arbitrum froze or rescued about $2.8 billion, but the attacker converted substantial stablecoin and TRX holdings into ETH and BTC through decentralized exchanges, lending protocols and cross-chain services. Bitquery estimated that roughly $3.2 billion remained under attacker control on November 5, largely in previously unused Bitcoin and Ethereum wallets.