FBI Attributes $6 Billion Binance Hack to North Korea, Urges DeFi Address Blocks
SecurityDeFi
Bearish

FBI Attributes $6 Billion Binance Hack to North Korea, Urges DeFi Address Blocks

The FBI has publicly attributed a $6 billion hack of Binance to North Korean actors and asked the DeFi community to block a list of bitcoin, ether and solana addresses. Chainalysis said the attackers have already used thousands of addresses, a count it expects to keep rising.

Nov 1, 2026, 01:18 AM1 min read

Written by CoinArticle’s AI Newsroom · from 1 cited source. How we work

Reporting: CoinDesk — this story is based on a single source so far.

What the FBI Said

The FBI has confirmed that North Korean state-linked actors were behind a hack of Binance valued at approximately $6 billion. The agency's notice asks decentralized finance protocols and their operators to block a list of bitcoin, ether and solana addresses associated with the attack.

The notice lists hundreds of addresses. The source material does not specify the exact date of the hack or the methods used to access funds.

Scale of the Address Network

Blockchain analytics firm Chainalysis reported that the attackers have already used "thousands of addresses" to move funds. That figure is well above the hundreds listed in the FBI notice, which suggests the published list captures only part of the activity observed on-chain.

Chainalysis said it expects the number of addresses to continue growing as the attackers move assets. For protocol teams, that means a static blocklist may lag the actual flow of funds.

Implications for DeFi Operators

The FBI's request places a practical burden on DeFi protocols, which must decide whether and how to screen addresses against a government-issued list. Blocking addresses at the protocol or front-end level involves tradeoffs between compliance and the permissionless design many of these systems are built around.

The source material does not indicate how many protocols have agreed to implement the blocks or whether any have already done so.

Why It Matters

For Traders

Expect elevated volatility and possible liquidity shifts in affected DeFi venues as blocklists are adopted and funds keep moving across addresses.

For Investors

A state-attributed hack of this size raises long-term regulatory and sanctions pressure on exchanges, DeFi protocols and the chains they rely on.

For Builders

Protocols may need to add address screening and blocklist tooling, which changes compliance architecture for permissionless front ends and smart contracts.

This article is for information only and is not financial advice. Read the full disclaimer.

Sources

Related Articles

Latest News