Binance’s security team detected and stopped 57 suspected North Korea-linked cyber threats over the course of 2026. One campaign slipped through. In its initial findings report, published on November 3, the exchange reconstructed a six-month, multi-stage intrusion that began with a tampered software installer in June and ended with unauthorized wallet signing on October 29, moving approximately $6.34 billion in digital assets, the largest theft the cryptocurrency industry has recorded.