Hackers claim to hold Binance user data and demand $900,000 as the fallout from the $6.3 billion theft spreads

A group posting on the darknet says it holds 335.9 million records taken from Binance and is demanding $900,000 not to publish them, according to a French-language post from Goku Crypto News. The desk found no independent confirmation and no published sample. The figure of 335 million matches the registered-user total Binance itself reports, so the number alone proves nothing. Binance has denied earlier darknet claims of the same kind, telling Cointelegraph that no data had leaked from its systems.

The claim comes 11 days after the October 29 theft, which rekt.news and other outlets have examined in detail. Blockchain analytics firm TRM Labs said an attacker moved about $6.36 billion out of Binance wallets on ten blockchains, most of it in roughly 20 minutes. Al Jazeera reported that Binance itself calls it the biggest crypto theft on record. Binance says the attack began with social engineering: a fake job interview infected an employee's device, and the stolen credentials gave the attackers access to its wallet infrastructure. The nonprofit Security Alliance (SEAL) estimates the intruders were inside Binance's systems for about eight weeks before they moved the funds. One technical write-up says the last step used Ethereum's EIP-7702 delegation feature to give an attacker-controlled contract partial control of a Binance hot wallet.

The Federal Bureau of Investigation (FBI) attributed the theft to TraderTraitor, a North Korean state hacking group. Chainalysis and TRM Labs also attribute it to TraderTraitor with high confidence. Kim Yo Jong, the sister of North Korea's leader, dismissed the accusation. According to Reuters figures cited by Al Jazeera, about $3 billion has been frozen, including more than $2.3 billion frozen by stablecoin issuers Tether and Circle. The Crypto Times reports that the attackers have converted $124 million into 1,650 bitcoin and that $3.1 billion remains in linked wallets.

Binance says it has replaced 90% of the stolen amount with company funds and will not pass losses to users. TechCrunch reported that its chief financial officer is leaving to "pursue a new venture."