Binance Says It Stopped 57 North Korea-Linked Cyber Threats in 2026

Binance co-founder Yi He says her exchange fended off 57 suspected cyber threats tied to North Korea in 2026, according to a Cointelegraph report. The figure covers attempts the company flagged and stopped, not breaches. That distinction matters: Binance is framing this as a scoreboard of blocked attacks, not a damage report.

The claim comes straight from a co-founder of the largest crypto exchange by trading volume, which gives it weight — and also means the number is Binance's own accounting. No independent breakdown of the 57 cases has been published. Cointelegraph relayed the update without detailing the methods, targets or timing of the alleged attempts.

North Korea-linked hacking crews have spent years hunting crypto. Exchange wallets, bridges and private keys have long been their preferred hunting grounds, because stolen coins can be moved and laundered faster than almost any other asset. That reputation is why a 57-case tally lands as more than a rounding error.

The disclosure lands as a headline number rather than a full report. There's no public list of the incidents, no named suspects beyond the North Korea link, and no indication of whether any of the 57 attempts got close to customer funds. Binance hasn't outlined what happens to the intelligence it gathers on those attempts.

What comes next is the usual arms race. Exchanges keep pouring money into security teams, threat monitoring and wallet controls while attackers keep probing for the one weak link. Yi He's number, if it holds up, is both a flex and a warning shot.