FBI Links North Korea to Binance Hack, $4.7B in Customer Withdrawals Follow
A state-sponsored cyberattack on a major U.S.-accessible cryptocurrency exchange raises direct questions for Congress about the adequacy of federal digital asset security law and sanctions...
The Federal Bureau of Investigation confirmed Saturday that a North Korean state-backed cybercrime group carried out a hack of cryptocurrency exchange Binance, prompting more than $4.7 billion in customer withdrawals after the platform resumed operations on Sunday, according to reporting by the New York Post on November 2, 2026.
Binance told the New York Post on Monday that the $4.7 billion in outflows represents approximately 3 percent of the exchange's total assets, and that withdrawal levels were already stabilizing toward normal volumes as of that statement. The company did not specify the total asset figure from which that 3 percent calculation was derived. The filing or disclosure that would reveal Binance's current total asset holdings is a financial statement filed with relevant regulators, which has not been made public as of the date of this report.
The FBI's attribution to North Korea places the incident within the framework of U.S. Sanctions law. North Korea is subject to comprehensive economic sanctions administered by the Department of the Treasury's Office of Foreign Assets Control (OFAC) under Executive Order 13722 and related authorities. Any U.S. Person or entity that processes transactions connected to sanctioned North Korean actors is potentially subject to civil or criminal liability under 50 U.S.C. 1701 et seq.
The Lazarus Group, a North Korean state-linked hacking organization, has been previously designated by OFAC and attributed by the FBI and the Cybersecurity and Infrastructure Security Agency (CISA) to multiple cryptocurrency thefts. In 2022, OFAC attributed a $625 million hack of the Ronin Network to Lazarus and added associated wallet addresses to its Specially Designated Nationals list, as documented in OFAC's public enforcement records. The FBI's Saturday statement did not specify which sub-unit of North Korean cyber operations was responsible for the Binance incident.
The dollar amount cited in the current incident, described in the New York Post report as the largest bank heist in history by experts quoted in that coverage, would exceed prior documented cryptocurrency thefts if confirmed by federal investigators. What document would confirm or revise that figure is an official FBI case record or a subsequent OFAC enforcement notice, neither of which has been released.
Binance has operated under significant U.S. Regulatory scrutiny. In November 2023, the company and its founder Changpeng Zhao pleaded guilty to violations of the Bank Secrecy Act and anti-money laundering provisions, with Binance paying $4.3 billion in penalties, as documented in the U.S. Department of Justice press release dated November 21, 2023, and the plea agreement filed in the Western District of Washington. Zhao was sentenced to four months in federal prison in April 2024, per court records in case number 2:23-cr-00178.
Senator Bernie Sanders (I-VT) introduced legislation in this Congress to pause the development of advanced artificial intelligence systems, citing cybersecurity threats including AI-assisted account intrusions, according to New York Post opinion coverage dated November 2, 2026. The text and bill number of Sanders's legislation had not been published in the congressional record as of the date of this report. What document would confirm the bill's precise scope and status is the legislation's text as entered into the congressional record or posted on Congress.gov.
Congress has not passed comprehensive federal cryptocurrency security legislation as of November 2, 2026. The Financial Innovation and Technology for the 21st Century Act (FIT21), which passed the House in May 2024 by a vote of 279 to 136 per the House clerk's roll call record, was not enacted into law by the previous Congress. No equivalent measure has been signed into law in the current Congress.
The combination of an FBI-attributed state-sponsored attack and a multi-billion-dollar customer withdrawal event places the question of federal digital asset oversight before the new Congress seated after the November 2026 midterm elections. It is unknown as of this report whether the House Financial Services Committee or the Senate Banking Committee has scheduled hearings in response to the Binance incident. The committee schedules and any subpoenas or letters to Binance would be the documents that answer that question.
What remains unknown includes the total dollar value of assets stolen in the hack, the specific technical vector used to access Binance systems, and whether any U.S.-based customers suffered direct losses. Those facts would be contained in the FBI's full investigative disclosure, Binance's regulatory filings with the relevant authority, and any class action or individual civil complaints filed in U.S. Federal court, none of which have been made public as of November 2, 2026.