FBI: Aware of the Binance theft, working with partners to assess the scope and impact
The U.S. Federal Bureau of Investigation (FBI) responded to the Binance theft incident, saying that it is aware of the incident and is communicating with relevant partners to understand the scope of the related activity and assess the potential impact.
In a statement provided to the media, the FBI said it is contacting relevant public and private partners to understand the scope of the activity, assess the potential impact, and coordinate appropriate investigative steps. People familiar with the matter told Reuters that Binance is cooperating with global law enforcement agencies, including the FBI and the U.S. Secret Service. Blockchain analytics firms TRM Labs and Chainalysis linked the approximately $6.3 billion theft to the North Korea-linked group TraderTraitor.
The statement limited the FBI’s involvement to the level of being “aware and coordinating,” and did not announce a formal case opening or attribution. On the capital path, cooperation between law enforcement agencies and stablecoin issuers and exchanges has frozen approximately $3 billion in assets, forming a parallel path from outflows from the platform’s own hot wallets to issuer-controlled and law-enforcement-tracked flows; the beneficiaries are the parties involved in holding and recovering assets that can be frozen, while the costs are borne by the attacker under freezing and investigative pressure, structurally reflecting an immediate response mechanism in large-scale on-chain thefts involving public-private cooperation.
Original sources:
Title: FBI and US Secret Service working with Binance after $6.3 billion hack, source says
Publisher: Reuters
Publication date: 2026-10-30
URL: https://www.reuters.com/world/us/fbi-us-secret-service-working-with-binance-after-63-billion-hack-source-says-2026-10-30/
Nature of source: mainstream media report (including the FBI statement)
Verification status: related statement passages have been read
Supporting content: The FBI is aware of the incident and is communicating with relevant public and private partners to understand the scope, assess the impact, and coordinate investigative steps
ABAB AI Insight
After Binance’s approximately $6.3 billion theft, the FBI responded quickly, with wording in its statement limited to being “aware and in contact with partners,” and it did not publicly announce a formal investigation or an attribution conclusion. This stands in contrast to the FBI’s approach in the earlier Bybit incident, where it explicitly attributed responsibility to TraderTraitor and issued a public notice, showing that this incident is still in an early assessment stage. Binance co-CEO Richard Teng had previously said that the company was cooperating with global law enforcement agencies, echoing the FBI statement.
On the capital path, law enforcement involvement running in parallel with freezing actions by stablecoin issuers (such as Circle and Tether) has locked up approximately $3 billion in assets. This creates a multi-layer path of “platform’s own hot wallets stolen → issuer freezing → law-enforcement tracing,” reducing the attacker’s immediate ability to cash out. Compared with relying solely on on-chain tracing, the participation of the FBI and the Secret Service increases the possibility of cross-jurisdictional coordination and potential sanctions tools.
Comparable cases include the FBI issuing a public notice after the Bybit $1.5 billion incident asking the industry to block related addresses, as well as past practices in the Bitfinex case where law enforcement agencies helped recover assets. This statement did not provide specific addresses or operational details, indicating that the investigation is still at the stage of confirming the scope.
Specific judgment: given that the FBI has confirmed it is aware of the incident and is coordinating with public and private partners, while the Secret Service and issuers have already implemented freezes, the case has entered a formal law-enforcement assessment track; the key going forward is whether there will be a public attribution, a blocking notice, and whether the final disposition of the frozen assets will affect the execution of Binance’s commitment to cover user losses with company funds.
ABAB News · Laws of Cognition
The limited wording of law-enforcement statements reflects that the investigation is still in an early scope-confirmation stage.
Parallel issuer freezes and law-enforcement coordination reduce the attacker’s immediate cash-out space.
Public-private cooperation turns on-chain tracing into an actionable investigation and recovery path.