Binance pledges to cover losses after reported $6.3bn breach; TRM Labs points to North Korea

As reported by The Guardian (Business) and Reuters. The allegations below are theirs, not Vocemundi's.

Binance, the cryptocurrency exchange, has suffered a security breach involving the loss of digital assets. The Guardian and Reuters both report the incident. Binance's own statements, quoted by The Guardian, refer to covering "all hacking losses" and "every loss".

The UK Financial Conduct Authority (FCA) has responded. The Guardian quoted an FCA spokesperson as saying: "While Binance wasn't registered with the FCA to provide crypto services in UK, we're aware of the reported incident and engaging with them to understand the impact."

What is reported

Digital assets worth more than $6.3 billion (£4.7 billion) have reportedly been taken, according to The Guardian. Reuters puts the theft at $6.3 billion and attributes the figure to TRM Labs, a US blockchain analysis firm. The Guardian reports its figure without naming its origin. The reports reviewed by Vocemundi do not include a Binance statement confirming the total.

According to The Guardian, the breach apparently followed the hacking of a laptop belonging to one of Binance's engineers. The Guardian also reports that Binance froze withdrawals after the breach.

The Bank of England is monitoring the hack, according to a source familiar with the matter cited by The Guardian. The newspaper reports it is understood there are no active concerns. The Bank of England declined to comment. According to The Guardian, the Bank and the FCA will watch UK banks, insurers or fintechs exposed to Binance for any effect on the wider UK financial system.

What each side says

• TRM Labs: North Korean hackers were behind the theft, according to Reuters.
• Binance: It says it worked with partners to freeze the affected assets and has located about $3 billion so far. According to The Guardian, it gave no update on the remaining $3.3 billion. A Binance spokesperson was quoted as saying: "Rest assured that user funds are completely safe." The company says its teams are "working around the clock".
• Yi He, Binance co-founder: The company would cover "all hacking losses", according to The Guardian.
• Richard Teng of Binance: The Guardian quoted him as saying: "your money is safe, and we're covering every loss."

What remains unclear

The reports do not describe the evidence TRM Labs used for its attribution. They do not include any response from North Korean authorities, or a Binance statement on the attribution. They do not establish when the breach occurred or how long it lasted. A lawyer quoted by The Guardian refers to "20 minutes", but no source confirms that timeline. The reports do not say how long withdrawals will stay frozen, which assets were affected, or whether law enforcement or regulators outside the UK are involved.

Vocemundi note: this story relays allegations published by The Guardian (Business) and Reuters. Vocemundi did not have access to the underlying evidence or documents and has not independently verified these claims. The people and organisations named are presumed innocent; their response is included where it was available.

Analysis

The key figures in this story rest on limited sourcing. Reuters attributes both the $6.3 billion total and the North Korea link to TRM Labs, and The Guardian gives no origin for its figure of more than $6.3 billion, so the two reports may share a single source on these points. Binance's pledge to cover losses, if fulfilled, could limit direct harm to users. Questions remain about the roughly $3.3 billion not yet located, and how long withdrawals stay frozen. UK authorities appear to be monitoring possible exposure rather than signalling concern. Further detail from Binance, investigators or regulators could confirm or revise the current picture.

Produced by the Vocemundi newsroom with AI assistance.