TRM Labs calls for offensive action against North Korean hackers after $6.36 billion Binance theft

Ari Redbord says defense alone won't stop state-backed hackers after the largest crypto theft on record Approximately $6.36 billion in digital assets left Binance wallets on October 29, 2026. Most of it moved in about 20 minutes. Blockchain intelligence firm TRM Labs has attributed the attack to North Korea. One of its top executives now argues that governments should stop playing goalie and start taking shots. Twenty minutes, ten blockchains, one very bad night The theft hit Binance wallets across ten different blockchains. According to TRM Labs, the bulk of the funds moved within a 20-minute window that opened at 20:05 UTC. TRM Labs linked the operation to TraderTraitor, a North Korean hacking group that sits within the broader Lazarus network. The firm said it reached that conclusion with high confidence, drawing on intelligence gathered both on-chain and off-chain. The FBI corroborated TRM Labs’ attribution shortly after the incident. The scale puts the event in a category of its own. It is the largest recorded theft in crypto, and it dwarfs the $1.5 billion Bybit hack of February 2025, which was also tied to TraderTraitor. The industry hits the brakes, and Binance opens its wa...