Binance Hack: $3.24bn in Crypto Still Linked to North Korea
The Binance hack saw $6.43 billion in crypto stolen on October 29, in an attack the FBI attributed to North Korean group TraderTraitor. The laundering operation has since involved about 12,000 wallets across 11 blockchains and more than 40,000 transactions in under four days.
About $2.85 billion has been frozen or seized, while roughly $3.24 billion remains in addresses linked to the theft. Most of the funds still held are in bitcoin and ether. A negligible amount appears to have been cashed out so far.
The laundering has relied on splitting funds across thousands of wallets, cross-chain bridges, decentralised exchanges and lending vaults. Some bitcoin has also been mixed through coinjoins. Activity initially centred on Tron before funds began moving on Ethereum, Solana, NEAR and XRP. Analysts say the pattern points to conventional automation, not evidence of AI-driven decisions.
The Binance hack could continue to pressure crypto-security sentiment and raise scrutiny of exchanges and cash-out services. However, most stolen assets remain traceable on-chain, and the article reports no substantial cash-out to date. Analysts expect some ether to be swapped for bitcoin and funds to be moved gradually through over-the-counter brokers and exchanges.
Neutral
The news is serious for crypto-security confidence, but its immediate market impact appears limited. The $6.43 billion theft is exceptionally large, and the laundering activity could prompt short-term caution, closer scrutiny of exchange-linked assets and services, and heightened volatility if large transfers or attempted cash-outs are detected. Yet the article says about $2.85 billion has been frozen and that only a negligible amount has likely been cashed out. Most of the remaining assets are still visible in traceable wallets, so the report does not establish an immediate wave of selling into the market.
Past hacks show why the risk is worth monitoring without assuming a broad market move. After the 2025 Bybit hack, North Korea reportedly moved 499,000 ETH into bitcoin within ten days, while cashing out took months. That case suggests laundering can create sustained operational and compliance pressure without necessarily producing immediate, market-wide selling. The Binance incident is larger, but the funds may also take time to convert and exit.
In the short term, traders may react to new wallet movements, freezes, exchange alerts or evidence of funds reaching OTC brokers. Those developments could affect sentiment around Binance, affected tokens and crypto-sector risk more broadly. Over the longer term, further freezes and stronger transaction screening may limit the amount that reaches liquid markets, while the scale of the incident could reinforce demand for stronger exchange security and compliance controls. With no reported large-scale cash-out or confirmed market-wide sell pressure, a neutral overall view is more appropriate than a bullish or bearish call.