North Korea's TraderTraitor operation stole 18,270.2 BTC from a Binance hot wallet during an October 29, 2026, security breach, which the FBI attributed to North Korea on October 31. The broader theft involved approximately $6.3 billion in token assets, while the Bitcoin portion was valued at $1.4 billion and extracted in less than 20 minutes. As the attacker converted stolen tokens into ETH and TRX, arbitrage traders and MEV bots competed for execution priority, helping push Ethereum's daily fees across all protocols to $47.3 million on October 30, the highest level on the February–October 2026 chart. Binance began phased withdrawal restoration on November 1 and reported approximately $3.64 billion in net outflows after restoring services. The stolen Bitcoin remains dormant across 19 wallets, and investigators can trace but cannot administratively freeze or reverse confirmed Bitcoin transactions.