Attackers stole an estimated $6.3–$6.43 billion from Binance hot wallets across approximately ten blockchains on October 29, 2026, apparently after compromising internal transaction-signing infrastructure. The FBI attributed the theft to North Korea's TraderTraitor group, an assessment also supported by TRM Labs and other blockchain investigators. AMLBot traced at least $1.71 billion into thousands of downstream wallets, predominantly on Tron, with funds reaching decentralized exchanges, bridges, and Bitcoin mixers. Investigators also identified an Ethereum address that combined Binance funds with proceeds linked to the earlier Bitget theft.