The FBI just put a name on the biggest crypto heist ever, and the detail that matters most to me isn't the attribution — it's where the money is going.
Per the FBI's Saturday statement, North Korea's TraderTraitor unit — the same group behind last year's $1.5B Bybit hack — stole the $6.3B from Binance on Thursday, and the stolen funds are being converted primarily into ETH, with more laundering expected through DeFi and instant-swap services. The FBI is now asking exchanges, node operators and DeFi services to block the flagged addresses.
Here's my take: attribution is nice, recovery is what counts, and this is where regular users get caught in the crossfire. Tainted ETH moving through DeFi means innocent traders can end up holding flagged funds without ever touching Binance — and that's exactly why the FBI's blocklist matters to people far beyond one exchange's customers. If you use instant swaps or smaller DEXs, this is the week to be extra careful about counterparties.
On the exchange side, Binance says 90% of the stolen assets are now replenished (up from 80%), with the top 10 tokens fully backed, and withdrawals are still targeted for today, Sunday, with a full cryptographic proof-of-reserves verification due by Nov 3. That order matters — people will be able to move funds before they can independently verify the proof.
So my question: with withdrawals reopening today and tainted ETH circulating, are you moving funds off exchanges immediately, or waiting for the Nov 3 proof first?
$ETH
Per the FBI's Saturday statement, North Korea's TraderTraitor unit — the same group behind last year's $1.5B Bybit hack — stole the $6.3B from Binance on Thursday, and the stolen funds are being converted primarily into ETH, with more laundering expected through DeFi and instant-swap services. The FBI is now asking exchanges, node operators and DeFi services to block the flagged addresses.
Here's my take: attribution is nice, recovery is what counts, and this is where regular users get caught in the crossfire. Tainted ETH moving through DeFi means innocent traders can end up holding flagged funds without ever touching Binance — and that's exactly why the FBI's blocklist matters to people far beyond one exchange's customers. If you use instant swaps or smaller DEXs, this is the week to be extra careful about counterparties.
On the exchange side, Binance says 90% of the stolen assets are now replenished (up from 80%), with the top 10 tokens fully backed, and withdrawals are still targeted for today, Sunday, with a full cryptographic proof-of-reserves verification due by Nov 3. That order matters — people will be able to move funds before they can independently verify the proof.
So my question: with withdrawals reopening today and tainted ETH circulating, are you moving funds off exchanges immediately, or waiting for the Nov 3 proof first?
$ETH