The FBI blames North Korea for the $6bn Binance theft of 29 October 2026. What is confirmed, what it means for UK crypto casino players, and a safety checklist.
Last updated: 7 November 2026
What happened at Binance, and why it matters if you gamble with crypto
On or about 29 October 2026, more than $6 billion in crypto was taken from Binance, the world’s largest exchange. Two days later, on 31 October, the FBI publicly attributed the theft to North Korea, naming the activity “TraderTraitor”. Binance has said it will absorb the loss rather than pass it to customers, and it temporarily paused deposits and withdrawals while it investigated.
If you move money between an exchange and a crypto casino, this is the kind of event that tests your setup. This article sets out what is confirmed so far, what it means for a UK player in practice, and a short checklist for keeping your casino bankroll out of harm’s way. It is not advice to buy, sell or hold any coin.
What is confirmed so far
Details are still emerging and Binance has promised a full technical post-mortem. The points below come from the FBI’s alert and from Binance’s own statements as reported by ABC News and the Associated Press.
| Date | What happened | Source |
|---|---|---|
| 29 October 2026 | Unauthorised withdrawals from Binance hot wallets. Binance later estimated the impact at about $6.3 billion and said it had frozen roughly $3 billion on-chain with blockchain partners. | ABC News |
| 29 to 30 October | Binance paused deposits and withdrawals as a precaution and said its initial investigation pointed to a compromised laptop belonging to a DevOps engineer, with further points of entry still being traced. | ABC News |
| 31 October 2026 | The FBI said North Korea was responsible, that stolen assets were being converted mainly into Ether, and that it expects further laundering through DeFi and instant swap services. It published a list of addresses and asked exchanges and node operators to block them. | FBI |
| 31 October 2026 | Binance said it had covered 90% of the affected amount from its own reserves and that customers would be made whole. The Associated Press described the theft as the largest crypto heist on record, by the same group blamed for the $1.5 billion Bybit theft in 2025. | AP via ABC News |
Binance’s wording on compensation was direct: “Binance will cover all losses from the SAFU fund and the company’s funds”, according to the statement quoted by ABC News. SAFU is the exchange’s emergency insurance fund.
What is not confirmed
- The exact attack path. Binance has said the compromised laptop is an initial finding, not a final one.
- Whether every customer balance was unaffected in practice. Binance says user funds are safe, but the figures were still moving when this was written.
- Attribution is an FBI assessment, not a court finding.
Why this matters more for gamblers than for most crypto users
Most people who hold crypto on an exchange rarely move it. Casino players are different. A typical pattern is: buy on an exchange, send to a casino, play, withdraw back to the exchange, sell. That means your money passes through an exchange’s hot wallets several times a month, and a pause on withdrawals lands at exactly the moment you want to cash out.
Three practical consequences follow from a breach like this one:
- Withdrawal pauses are a feature of crypto, not a bug. Exchanges and casinos both freeze movements when something goes wrong. If your bankroll sits on the exchange, you cannot reach it until the pause lifts. Our guide to crypto casino withdrawal times explains the normal delays, and a security freeze sits on top of those.
- Deposits sent during a pause can get stuck. If you sent coins to or from an exchange while it had deposits disabled, check the transaction on a block explorer before you panic. The steps in our stuck deposit troubleshooting guide apply to exchanges as well as casinos.
- Blocked addresses can touch legitimate users. The FBI asked exchanges and DeFi services to block transactions “with or derived from” the listed addresses. Honest users will not be on that list, but compliance teams screen incoming funds more aggressively after a theft, so expect more questions on larger deposits and withdrawals for a while.
The rule we keep coming back to: an exchange is not a wallet
We said this long before the Binance breach, in our guide to the best crypto wallet setup for casino play: do not deposit to a casino straight from an exchange, and do not use an exchange as the place your casino money lives. A breach of this size shows why. When an exchange is attacked, every customer’s access depends on that one company’s reserves, insurance fund and decisions about when to reopen withdrawals.
Binance says it has the reserves to cover this one. Smaller exchanges may not. The habit worth building is the same either way:
- Keep the coins you are not about to use in a wallet whose keys you control.
- Move only the amount you intend to play, and move it from your own wallet to the casino.
- Withdraw winnings back to your own wallet first, then to an exchange only when you are ready to sell.
The mechanics of that third step are covered in our guide on how to deposit Bitcoin at an online casino.
Scams that follow a headline breach
Every large theft is followed by a wave of fake “compensation”, “recovery” and “verify your account” messages. The Financial Conduct Authority’s scam protection guidance describes recovery room scams, where fraudsters contact people after a loss and offer to get money back for a fee. The FCA says it will never ask you to transfer money to it, and never ask for PINs or passwords, and the same is true of any genuine exchange or casino.
Red flags to ignore outright
- Any message asking you to “confirm” or “re-link” your wallet with your seed phrase or private key. No legitimate service needs these.
- Links to a Binance or casino “claims portal” sent by email, text, Telegram or social media. Go to the site by typing the address yourself.
- Offers to trace and recover stolen crypto for an upfront fee.
- Urgency. The FCA lists pressure to act quickly as one of the clearest warning signs.
If you have lost money to a scam in the UK, the FCA points people to Report Fraud, formerly Action Fraud, on 0300 123 2040.
A ten-minute checklist for crypto casino players this week
| Check | Why |
|---|---|
| Where is your bankroll right now? | If it is on an exchange, decide whether it needs to be. Anything you are not about to play belongs in your own wallet. |
| Are exchange withdrawals open? | Check the exchange’s own status page before sending anything to it, and before planning a casino withdrawal that routes through it. |
| Is two-factor authentication on an app, not SMS? | Account takeovers spike after breaches because attackers reuse leaked details. |
| Have you reviewed API keys and connected apps? | Old trading bots and portfolio trackers can hold withdrawal permissions you forgot about. |
| Does the casino you use hold a UK licence? | Licensed British operators do not currently accept crypto deposits, as we explain in our piece on the Gambling Commission’s position on crypto payments. If you play with crypto, you are almost certainly playing offshore, with the risks that brings. Read our guide to whether crypto casinos are legal in the UK before you decide. |
What to watch next
Binance has said it will publish a detailed technical post-mortem and an updated Proof of Reserves once remediation is complete. For players, the useful signals over the coming weeks are whether withdrawals remain open and settle at normal speed, whether other exchanges tighten screening of incoming funds, and whether any casino you use announces changes to the networks or coins it accepts.
None of this changes the basics. Crypto gambling carries the risks of crypto and the risks of offshore gambling at the same time. Set a budget you can afford to lose entirely, keep it in a wallet you control, and treat any unexpected message about your funds as hostile until proven otherwise.
Frequently asked questions
Did Binance customers lose money in the October 2026 hack?
Binance has said it will cover all losses from its SAFU fund and company funds, and on 31 October said it had already covered 90% of the affected amount. The remaining details are expected in its post-mortem.
Who was behind the Binance theft?
The FBI said on 31 October 2026 that North Korea was responsible, referring to the activity as TraderTraitor. It is the same label the FBI used for the 2025 Bybit theft. This is a law enforcement assessment rather than a court finding.
Should I move my crypto off exchanges because of this?
We cannot tell you what to do with your money. What we can say is that funds held on an exchange depend on that exchange’s security and reserves, and that coins you are not about to use are generally safer in a wallet whose keys you control.
Can a casino refuse my deposit because of the Binance hack?
Casinos and exchanges screen incoming funds against lists of flagged addresses. Money that has never touched a flagged address should pass, but expect more source-of-funds questions on larger amounts for a while.
How do I spot a fake Binance compensation message?
Genuine companies never ask for your seed phrase or private key, and never ask for a fee to release your own funds. Ignore links in unexpected messages and go to the official site by typing the address yourself.
18+. Gamble responsibly. If gambling is affecting you, visit GambleAware or call the National Gambling Helpline on 0808 8020 133.
