TRM Labs attributes a ~$6.36B drain of Binance hot wallets on Oct 29 to North Korea's TraderTraitor, starting about 20:05 UTC with most moved in ~20 minutes across 10 blockchains, which would make it the largest crypto theft on record at ~4x the $1.5B Feb 2025 Bybit hack cited by AZ_Intel_ and MOSSADil.

TRM Labs attributes a ~$6.36B drain of Binance hot wallets on Oct 29 to North Korea's TraderTraitor, starting about 20:05 UTC with most moved in ~20 minutes across 10 blockchains, which would make it the largest crypto theft on record at ~4x the $1.5B Feb 2025 Bybit hack cited by AZ_Intel_ and MOSSADil.

Binance's initial finding points to a compromised DevOps engineer's laptop letting attackers submit unauthorized withdrawals through its own signing system, without leaking wallet private keys, including a single ~$2.5B Ethereum transaction described by WhaleNewsDaily and BudhilVyas.

Per those tracks: ~18,270 BTC (~$1.47B) split across 19 wallets, ~$3.8B on Ethereum from three hot wallets, ~613M USDT on Tron, 233.5M XRP, and ~970,549 SOL; attackers swapped ~$729M into ETH/TRX via DEXs before freezes.

Tether, Circle, Ripple, World Liberty Financial and Arbitrum's Security Council froze ~$2.7-3B, leaving ~$2.4B beyond issuer reach, specifically 420,000+ ETH and 18,270 BTC; one track at 03:54 UTC Oct 30 put attacker-controlled funds at ~$3.1B.

Current status from the same reports: withdrawals paused, Binance says customer funds are safe and losses will be covered, while BTC remains split with no further BTC moves at time of tracking. The amounts, attribution and freezes are claims by TRM via these posts, not independently verified on-chain in this answer.