---
title: "FBI links North Korea to $6 billion Binance hack, flags BTC, ETH and SOL addresses"
description: "CoinDesk reported that the FBI confirmed North Korea's involvement in a $6 billion Binance hack and asked the DeFi community to block bitcoin, ether and…"
language: en
canonical: "https://whycoinmoves.com/en/events/ethereum-fbi-confirms-north-korea-s-e17832058bc479"
published: 2026-11-01T01:10:57.000Z
updated: 2026-11-01T02:11:01.000Z
indexable: true
---

# FBI links North Korea to $6 billion Binance hack, flags BTC, ETH and SOL addresses

CoinDesk reported that the FBI confirmed North Korea's involvement in a $6 billion Binance hack and asked the DeFi community to block bitcoin, ether and…

Attributed sources: [CoinDesk](<https://www.coindesk.com/policy/2026/10/31/fbi-confirms-north-korea-s-role-in-usd6-billion-binance-hack-asks-defi-community-to-block-btc-eth-sol-addresses>)

## Key facts

CoinDesk reported that the FBI confirmed North Korea's involvement in a $6 billion Binance hack and asked the DeFi community to block bitcoin, ether and solana addresses listed in its notice. Chainalysis said the attackers have already used thousands of addresses and expects that number to keep growing.
Evidence strength: Single source, 1 publisher group(s) (CoinDesk).
After site detection, observed returns were 5 minutes: +0.03% (difference from BTC +0.01 pts; Nov 1, 2026, 01:10 → Nov 1, 2026, 01:15, UTC; Gate · USDT); 1 hour: +0.13% (difference from BTC +0.10 pts; Nov 1, 2026, 01:10 → Nov 1, 2026, 02:10, UTC; Gate · USDT)
In the preceding 30 days, the 99th percentile of absolute hourly returns was 1.68% (OKX · USDT; cutoff Nov 1, 2026, 01:10, UTC).

## Returns after site detection

| Window | Return | BTC | Difference from BTC | Actual sampled interval (UTC) | Source |
| --- | --- | --- | --- | --- | --- |
| 5 minutes | +0.03% | +0.02% | +0.01 pts | Nov 1, 2026, 01:10 → Nov 1, 2026, 01:15 | Gate · USDT |
| 1 hour | +0.13% | +0.03% | +0.10 pts | Nov 1, 2026, 01:10 → Nov 1, 2026, 02:10 | Gate · USDT |

## Historical hourly baseline

| Metric | Value |
| --- | --- |
| Coverage | 100.0% (720/720) |
| Median absolute hourly return | 0.19% |
| 99th percentile of absolute hourly returns | 1.68% |
| BTC beta | 1.22 |
| Source / cutoff (UTC) | OKX · USDT / Nov 1, 2026, 01:10 |

## Claims and open questions

- CoinDesk reported the FBI confirmed North Korea's role in the $6 billion Binance hack and asked the DeFi community to block BTC, ETH and SOL addresses.
- CoinDesk reported the FBI listed hundreds of addresses in its notice.
- Chainalysis said the Binance attackers have already used thousands of addresses and expects the number to continue growing, according to CoinDesk.
- Which specific Ethereum addresses the FBI flagged, and whether exchanges have frozen them, would be confirmed by the FBI notice itself or by exchange announcements.

## Source evidence

- [FBI confirms North Korea's role in $6 billion Binance hack, asks DeFi community to block BTC, ETH, SOL addresses](<https://www.coindesk.com/policy/2026/10/31/fbi-confirms-north-korea-s-role-in-usd6-billion-binance-hack-asks-defi-community-to-block-btc-eth-sol-addresses>) — CoinDesk; published Nov 1, 2026, 01:10; received Nov 1, 2026, 01:10 (UTC).


## Recent ETH events and market reactions

- [Ethereum upgrade tied to Binance breach that drained part of $6 billion loss](<https://whycoinmoves.com/en/events/ethereum-here-s-how-ethereum-upgrade-e060f331587c1d>) — Published Oct 30, 2026, 11:35 (UTC) · Single source (1 publisher) · Security · 5m -0.14% / 1h -0.51% / 24h -0.02%
- [Crypto liquidations reach $1.57 billion as Binance hack pressuures bitcoin and ether](<https://whycoinmoves.com/en/events/ethereum-crypto-liquidations-jump-1-57-a10f8b75bc1332>) — Published Oct 30, 2026, 11:09 (UTC) · Single source (1 publisher) · Security · 5m -0.10% / 1h -0.16% / 24h -0.01%
- [Binance breach of about $6.3 billion sends bitcoin and ether lower](<https://whycoinmoves.com/en/events/ethereum-6-billion-binance-hack-sends-2f4bf6f5ca38bf>) — Published Oct 30, 2026, 04:00 (UTC) · Single source (1 publisher) · Security · 5m -0.07% / 1h +0.74% / 24h +0.38%
- [CFTC chair says AI agents could challenge rules built around human traders](<https://whycoinmoves.com/en/events/ethereum-your-fridge-could-one-day-ea3db705917f92>) — Published Oct 29, 2026, 04:39 (UTC) · Single source (1 publisher) · Regulation · 5m +0.05% / 1h +0.31% / 24h -3.17%
- [Bitmine adds 10,452 ETH, reaching 4.95% of Ethereum supply](<https://whycoinmoves.com/en/events/ethereum-tom-lee-insists-crypto-bull-897e81c861e4a4>) — Published Oct 26, 2026, 14:12 (UTC) · Multiple publishers (2 publishers) · Market watch · 5m +0.47% / 1h +0.73% / 24h +0.61%
- [Full coin archive](<https://whycoinmoves.com/en/coins/ethereum>)

## Research for this archive

- [Crypto hacks and price impact: Bybit and Cetus case studies](<https://whycoinmoves.com/en/research/crypto-security-exploits-and-evidence-evolution.md>)
- [Why is crypto moving? How to check the evidence behind a price explanation](<https://whycoinmoves.com/en/research/how-to-check-why-crypto-is-moving.md>)
- [Altcoin beta to Bitcoin: BTC, ETH, SOL and DOGE hourly returns](<https://whycoinmoves.com/en/research/hourly-returns-and-bitcoin-beta.md>)
- [Will Bitcoin go back up? Every crash since 2011 and its recovery time](<https://whycoinmoves.com/en/research/bitcoin-crash-recovery-time.md>)

Evidence levels describe source coverage, not the probability that a report is true. Price moves and their timing cannot establish a cause; minute samples show an observed interval and alert thresholds are heuristics. Explanations are model-assisted, with citations and figures checked. Source titles stay in their original language; full articles are not republished. [Methods and limitations](<https://whycoinmoves.com/en/methodology>)
