Suspected North Korea-linked hacks accounted for nearly 89% of reported cryptocurrency hack losses in 2026 through October 30, 2026, according to Chainalysis

Overview Debates Related claims Topics Sources

LlamaRisk reported on October 30, 2026, that the Aave position of the hacker behind the $6.3 billion Binance exploit remained overcollateralized with $59.9 million in assets against $43.8 million in debt

During Aave's freeze triggered by the Binance hack starting October 29, 2026, blocked deposits and ongoing supplier withdrawals drove utilization in major stablecoin pools to 92–100%

A Bitget cryptocurrency exploit in September 2026 resulted in a loss of $387 million

Elliptic reported that attackers divided 18,270 stolen Bitcoin from the Binance hack on October 29, 2026 across 19 addresses, holding approximately 1,000 BTC in most addresses

Chainalysis reported on October 30, 2026, that attackers in the $6.3 billion Binance hack on October 29, 2026 used automated wallet loops and dense transaction networks across hundreds of interconnected addresses to circulate stolen assets

Chainalysis reported that Russia received $376.3 billion in cryptocurrency transactions between July 2024 and June 2025, exceeding Britain's $273.2 billion over the same timeframe

Aave set a zero loan-to-value ratio on V3 and zero collateral factor on V4 for nine assets including USDT, USDC, USDT0, POL, WAVAX, sAVAX, XAUt, PAXG, and OP, following the Binance hack

Attackers in the Binance breach on October 29, 2026 converted approximately 434 million USDT into 160,451 ETH on Uniswap, 1inch, and request-for-quote systems at prices 12% to 26% worse than market rates, according to Elliptic

Elliptic reported that attackers in the Binance hack on October 29, 2026 converted approximately $786 million in stolen stablecoins into Ethereum and Tron before asset freezes took effect

Investigators identified a laundering pattern on the Tron blockchain where numerous wallets received exactly 1 TRX before receiving and forwarding additional funds in the $6.3 billion Binance breach on October 29, 2026

Attackers in the Binance breach on October 29, 2026 exchanged approximately 234 million USDT for 638 million TRX on SunSwap and sold $48 million in RLUSD stablecoins alongside approximately 150 other stolen tokens, according to Elliptic

As of October 30, 2026, none of the 18,270 stolen Bitcoin divided across 19 addresses in the Binance hack on October 29, 2026 had reached an identified exchange or trading service, according to Elliptic

Aave's zero collateral restrictions imposed after the $6.3 billion Binance hack prevent restricted assets from backing new loans while allowing existing V3 positions to retain their health scores and liquidation thresholds

The Binance cryptocurrency platform suffered a major cyberattack on October 29, 2026, resulting in estimated losses between $6.3 billion and $6.4 billion

LlamaRisk reduced Slope2 borrowing-rate parameters on Aave to flatten the upper interest-rate curve and protect borrowers from escalating rates during deposits blocked by the Binance hack

Binance promised to cover user losses from the Binance hack using its SAFU reserve and corporate funds, according to its October 30, 2026 statement

The average loss per suspected North Korea-linked hack increased from $50.65 million in 2021 to $185.65 million in 2026 year-to-date, according to Chainalysis

North Korean hacking groups relied on social engineering methods targeting humans and multi-chain laundering across multiple blockchains rather than brute-force code breaking

Between 2021 and October 29, 2026, total reported cryptocurrency hack losses reached an estimated $22.34 billion, with suspected DPRK-linked hacks accounting for $13.24 billion, or approximately 59%, according to Chainalysis

Elliptic analysis on October 30, 2026, estimated total losses from the October 29, 2026 Binance exploit at $6.43 billion, while Binance stated on-chain freezes affected approximately $3 billion