US law enforcement agencies, including the FBI and the US Secret Service, are now involved in the international investigation into the large-scale hack at Binance, according to several reports published on October 30. Binance, the world’s largest cryptocurrency exchange by trading volume, confirmed its cooperation with authorities and stated it has allocated more than $6.34 billion to address the fallout from the incident and cover affected assets.
Circle freezes USDC linked to the attack
Jeremy Allaire, CEO of Circle, said that the stablecoin issuer is actively coordinating with law enforcement and has frozen approximately $823 million in USDC connected to the breach. This intervention highlights the significant ability of stablecoin issuers to restrict access to stolen funds via blockchain address blacklisting. Rival issuer Tether can also implement similar measures and block transfers from wallets associated with criminal activity, though the exact total Tether has frozen remains unclear.
Circle’s freeze of $823 million in USDC, alongside broader law enforcement action, shows the growing influence of stablecoin issuers in disrupting cyber-attacks. However, moving digital assets into a frozen wallet does not guarantee the recovery of funds by rightful owners.
Mini dictionary: Circle is a US-based fintech company behind the issuance of USD Coin (USDC), a popular fiat-backed stablecoin on multiple blockchains. The company collaborates with regulators and exchanges to support compliance and security in digital asset transactions.
International scope of investigation and earlier collaborations
Binance indicated that it is assisting agencies worldwide in the ongoing probe. The FBI confirmed awareness of the incident and explained that it is working with both public and private sector partners to determine the scope of the theft and coordinate its response. While the US Secret Service has not released public comments, its known responsibilities include investigating digital currency crimes, fraud, and cyber intrusions.
Earlier in the year, Operation Atlantic saw collaboration between the Secret Service, Binance, Coinbase, and the UK’s National Crime Agency to track down proceeds from phishing scams—though that operation dealt with different incidents affecting more than 20,000 victims and traced $45 million in stolen funds, freezing about $12 million. These figures do not relate directly to the current Binance hack.
Attribution to North Korean-linked group and asset recovery details
Blockchain analytics firms Chainalysis and TRM Labs linked the Binance breach to TraderTraitor, a hacking group reportedly associated with North Korea. This same group has previously been connected to major digital asset thefts, including the $1.5 billion Bybit hack in February 2025. Despite these findings, the FBI has commented only on its active investigation and has not formally attributed responsibility for the Binance attack to any group.
Reports vary in the estimated total of digital assets stolen—from $6.3 billion to $6.4 billion—with no single reconciled figure confirmed among different news outlets. Discrepancies also persist regarding the frozen Tether amounts, which range from statements of $975.1 million to over $1.5 billion USDT, depending on the source.
| Stablecoin Issuer | Frozen Amount (Reported) |
|---|---|
| Circle (USDC) | $823 million |
| Tether (USDT) | $975.1 million to over $1.5 billion |
Asset recovery, market impact, and customer payments
Binance indicated that around $3 billion in digital assets have been located or frozen so far, but this does not necessarily mean full recovery. CEO Richard Teng stated the company would use its own resources and its Secure Asset Fund for Users to support reimbursement efforts for affected users, reserving over $6.34 billion.
Independent confirmation of customer repayments has not been established at this stage. Freezing assets and recovering funds for distribution are separate milestones, and company commitments do not equate to verified payouts.
On October 30, as news of the hack developed, major cryptocurrencies saw mixed market action. According to CoinGecko at 21:13 UTC, Bitcoin declined 3.13% to $76,633, Ethereum fell 1.24% to $2,236.18, while Binance Coin dropped 1.35% to $697.85. The Crypto Fear & Greed Index measured 30 points, indicating a general sense of fear in the market. However, there is no direct evidence that the Binance hack itself triggered these moves.
| Asset | USD Price (Oct 30, 2026) | 24-hour change |
|---|---|---|
| Bitcoin (BTC) | $76,633 | -3.13% |
| Ethereum (ETH) | $2,236.18 | -1.24% |
| BNB | $697.85 | -1.35% |
Unresolved questions
The ongoing investigation has yet to produce a final technical account of how the breach occurred or a complete, independently verified tally of stolen and immobilized funds. Neither law enforcement nor Binance has provided a timeline for when customers might expect full compensation or when all perpetrators will be identified and apprehended.
For investors and customers, the premier concern is whether Binance’s funding commitment will translate to actual reimbursement. The process of asset recovery is complex, and even when stolen tokens are tracked, freezing them does not automatically return them to their original owners.
