Live Wire
|Latest Updates|Breaking News|
Live Wire Synced
|
|
Chronicle GlobalGlobal Live News & Entity Knowledge Graph
DEVELOPING

Binance says hackers who stole billions in crypto spent months planning heist

The hackers who stole billions of dollars in cryptocurrency from the Binance exchange spent months working on the theft and used both social engineering and...

By Dan Goodin•Nov 4, 2026, 04:06 PM UTC•1 min read
US
Share Dispatch
Binance says hackers who stole billions in crypto spent months planning heist
Key Developments & Executive Summary
  • Primary Wire Report: The hackers who stole billions of dollars in cryptocurrency from the Binance exchange spent months working on the theft and used both social engineering and...
  • Desk & Verification: Normalized under Cinema & Global Entertainment desk via Ars Technica.
  • Classification Status: DEVELOPING wire dispatches verified against institutional sources.

The hackers who stole billions of dollars in cryptocurrency from the Binance exchange spent months working on the theft and used both social engineering and novel malware in the process, the company said Tuesday. The heist, which both the FBI and the TRM Security firm attributed to North Korean actors, initially targeted $6.34 billion in cryptocurrency from Binance wallets. The exchange has since frozen or intercepted $2.85 billion of that sum. Binance said it has set aside funds required to cover the loss and provided this link to a Proof of Reserves page. The $6.34 billion represents the biggest sum ever targeted in a cryptocurrency theft. Advanced persistent threat Binance said the people behind the heist began no later than June and continued until last Thursday, when they successfully compromised an engineer's laptop and withdrew assets from several wallets. Like just about every organization that suffers a public, high-consequence hack, Binance said the threat actor was sophisticated and resourceful.

Share Dispatch
D

Dan Goodin

Contributor

Contributing Reporter via Ars Technica

Editorial Transparency

This article has been aggregated and formatted under Chronicle Global's editorial standards. Primary source reporting is attributed to originating news services and verified against public records.

Original Wire Source Release

Direct primary wire transmission originated by Ars Technica.

Read Original Primary Wire

Source Transparency & Verification Dossier

Primary Attribution

Ars Technica

View Original Wire / Document
Classification & Timestamp

Format: DEVELOPING

Retrieved / Published: Nov 4, 2026, 04:06 PM UTC

Content normalized through Chronicle Ingestion Engine.

Editorial Standards
Institutional Intelligence Dispatch

The Chronicle Morning Intelligence Briefing

Independent global intelligence and primary wire coverage. High-signal empirical dispatches delivered daily at 06:00 UTC.

•
Free Open Access•Independent global intelligence•Unsubscribe anytime

Related Coverage & Developing Updates