Binance: the FBI attributes the $6.3 billion hack to North Korea; $3.6 billion withdrawn on reopening
Checked on
Published on
- About $6.3 billion was stolen from Binance, and the FBI named North Korea as responsible.
- After reopening, net outflows were about $3.6 billion, a little over 2% of assets.
- Binance Japan says its Japanese customers’ assets are safe and unaffected.

In this article
What happened
According to the BBC, the Binance platform lost about $6.3 billion (around ¥1 trillion) of digital assets, which would be the largest hack in history. It had suspended all transactions and reopened on Sunday 1 November. According to ITmedia, Binance announced the damage on 30 October (Japan time).
The FBI’s announcement
On 31 October (local time) the FBI announced that the attack was the work of North Korea, through the activity it calls “TraderTraitor”, a group also known as Lazarus according to the BBC. It observed the stolen funds being converted into Ethereum and expects laundering through decentralised finance and instant-swap services; it asks private companies to block transactions linked to the hackers’ addresses. The FBI had already attributed to this group the theft of about $1.5 billion from Bybit in 2025. North Korea has always denied involvement.
What followed
According to the BBC, between 06:00 and 15:30 GMT on Sunday, Binance processed $4.649 billion in withdrawals and $1.01 billion in deposits, a net outflow of about $3.64 billion, just over 2% of the $171 billion of assets under management. The platform says it has covered about 95% of the stolen assets, with the rest possibly taking longer. The initial investigation pointed to an engineer’s laptop, but an update revealed “additional points of breach”.
Impact on users in Japan
According to ITmedia, Binance Japan stated on 30 October that all assets of Japanese customers were stored safely: in line with Japanese law, they are managed in “cold wallets” disconnected from the internet, separate from the hot wallets of the global version hit by the attack. Withdrawals had been suspended as a precaution. According to the BBC, the platform aimed at the United States is not affected either.
What could not be verified
The text of the FBI statement was not accessible at the time of consultation; its content is checked against ITmedia and the BBC. According to the BBC, Donald Trump said on Saturday evening: “We don’t know if it’s North Korea.” The identity of the perpetrators and the final destination of the stolen funds could change as the investigation proceeds.
Learn the grammar
French grammar
Learn sentence patterns and usage from the article’s own sentences.
01The present indicative
est / sont + attribute (noun, adjective, prepositional phrase)
Selon la BBC, Donald Trump a déclaré samedi soir : « Nous ne savons pas si c’est la Corée du Nord ».Key pointsÊtre in the present is est for a singular subject and sont for a plural one. It describes nature, state or place (“is”, “is located”). If what follows (the attribute) is a noun, adjective or prepositional phrase, it is not a passive. If a past participle follows, it is a passive (est annoncé). Headlines and summaries often use the present to describe the current situation.
02The passé composé
present of avoir + past participle
Le FBI a annoncé le 31 octobre (heure locale) que l’attaque était l’œuvre de la Corée du Nord, via l’activité qu’il nomme « TraderTraitor », un groupe aussi appelé Lazarus selon la BBC.Key pointsThe passé composé is the most common past tense, used for “did” and “has done” — actions completed in the past. It is formed with the auxiliary avoir (a / ont…) in the present + a past participle. Past participles of -er verbs end in -é (annoncer → annoncé); learn the irregular ones (faire → fait, prendre → pris, voir → vu). In the negative, ne … pas wraps the auxiliary (n’a pas annoncé). In the news it reports facts that have already happened, such as “announced” or “voted”.
03The imparfait
stem (nous form of the present) + -ais / -ait / -ions / -iez / -aient
Elle avait suspendu toutes les transactions et les a rouvertes dimanche 1er novembre.Key pointsThe imparfait describes states, background, habits and actions in progress in the past (il était, elle avait, ils pensaient). Take the nous form of the present, drop -ons, and add -ais / -ais / -ait / -ions / -iez / -aient. If the passé composé gives “the event itself”, the imparfait paints “the situation at the time”.
04The present conditional
stem (infinitive) + -ais / -ait / -ions / -iez / -aient
Selon la BBC, la plateforme Binance a subi le vol d’environ 6,3 milliards de dollars d’actifs numériques, ce qui serait le plus grand piratage de l’histoire.Key pointsThe conditional expresses possibility, supposition, unconfirmed information and polite requests (“would”, “might”). It uses the same stem as the future and the same endings as the imparfait (-ais, -ait, -ions, -iez, -aient): pouvoir → il pourrait. In the news it is used to avoid asserting, as in “is reported to…” or “there is a possibility…”.
05The passive voice in the present
être (est / sont) + past participle (+ par / de)
Selon la BBC, la plateforme destinée aux États-Unis n’est pas affectée non plus.Key pointsThe passive means “is done” or “is being done”. It is formed with être + past participle, which agrees with the subject in gender and number (la mesure est adoptée / les mesures sont adoptées). The agent is introduced by par (or de). In the news it is common when the event, rather than the actor, is the focus (est prévu / est annoncé / est connu).
06The passive in the passé composé
a / ont été + past participle
Les retraits avaient été suspendus à titre préventif.Key pointsThe past passive means “was done”. Its form is present of avoir + été (past participle of être) + past participle. Été does not change, but the last participle agrees with the subject in gender and number (la loi a été votée / les textes ont été votés). It is frequent in news reporting results such as votes, decisions and announcements.
07Negation and its scope
ne / n’ … pas · ne … plus
Selon la BBC, la plateforme destinée aux États-Unis n’est pas affectée non plus.Key pointsNormally ne and pas wrap the verb. Before a vowel, ne becomes n’. Check which part of the sentence the negation covers. Ne … plus means “no longer”.
08Citing a source with selon
selon + noun / organisation
Selon la BBC, la plateforme Binance a subi le vol d’environ 6,3 milliards de dollars d’actifs numériques, ce qui serait le plus grand piratage de l’histoire.Key pointsSelon means “according to”. Put a person or organisation after it as the source. It separates facts the writer checked directly from what another body or report said. Citing a source does not turn a forecast into an accomplished fact.
09Pouvoir: ability and possibility
peut / peuvent / pourrait + infinitive
L’identité des auteurs et le sort final des fonds volés pourraient évoluer avec l’enquête.Key pointsPut a base-form verb after pouvoir. Peut means “can” or “may”; the conditional pourrait gives a more reserved possibility, “might”. It does not necessarily mean implementation is settled.
10The subject relative pronoun qui
noun + qui + verb
Selon la BBC, la plateforme Binance a subi le vol d’environ 6,3 milliards de dollars d’actifs numériques, ce qui serait le plus grand piratage de l’histoire.Key pointsQui continues a description of the person or thing just mentioned (“the one that does…”). Because qui is itself the subject of the next verb, do not repeat the subject. The verb agrees with the noun qui refers to.
Japanese grammar
Understand the structure and usage from the text.
01Citing a source: によると
noun + によると
BBCによると、暗号資産取引所Binanceは、約63億ドル(約1兆円)相当の暗号資産が盗まれる被害を受けました。Key pointsAs in “LCPによると”, it shows where the information comes from. What that source reported follows. It is used differently from “私にとって”, which gives one’s own opinion.
02Expressing a possibility
〜可能性がある / 〜かもしれない
Binanceは、盗まれた資産の約95%を補填したと説明していますが、残りは時間がかかる可能性があります。Key pointsThese forms say something may happen. Even when “possibility” is written, it does not mean it will certainly happen. Check whose forecast it is, plus the time and conditions.
03Cause or purpose with ため
〜ため / 〜ために
日本の法令に従い、顧客の暗号資産をインターネットから切り離した「コールドウォレット」で管理しており、今回被害を受けたグローバル版のホットウォレットとは別に管理しているため、影響は確認されなかったといいます。Key pointsため is used for both reason and purpose. “成立ではないため” is a reason and “運転手を守るため” a purpose. Decide from the whole sentence whether what precedes is a cause or a goal.
04The polite past ました
verb stem (連用形) + ました
暗号資産取引所Binanceで、過去最大とみられる流出が起きました。Key pointsIn “発表しました”, ました makes a verb polite past. The negative is “ませんでした”. Read the actual date together with the date and time in the text.
05Quoting with と: content and report
plain-form sentence + と + verbe de parole (報じる, 説明する…)
FBIは北朝鮮の関与を発表し、Binanceは損失の約95%を補填したと説明しています。Key pointsと takes the content that is reported or explained. In “改定する方針だと報じました”, “改定する方針だ” is what the report said. Separating the content from who said it and how makes long sentences easier to read.
06Treating a clause like a noun with こと
plain-form sentence + こと + particle
FBIは、盗まれた資産が主にイーサリアム(ETH)に換えられていることを確認し、今後、分散型金融(DeFi)や即時交換サービスで資金洗浄が進むとみています。Key points“〜すること” treats an action or content like a noun. The particle after it (が・を・は…) shows its role in the sentence. “ことができる” is a fixed combination meaning “can”.