Rubbish Check
Guardian Business · 30 October 2026
source“How big a deal is the $6.3bn Binance crypto heist, who did it, and are investments safe?”
R2/ 10
Lightly altered
Rubbish Rating — 1 = base fact, 10 = pure rubbish
12345678910
In short
Rubbish Talk rates the Guardian's framing of the $6.3bn Binance heist a 2/10 because the explainer hedges the North Korea attribution correctly as "likely" rather than confirmed, matching the state of evidence at the time of publication, and every figure traces to named sources.
The Verdict
Lightly altered. The clickbait-style triple question headline is attention-seeking, but the body is scrupulous: attribution to North Korea is sourced to crypto-forensics firms and hedged as "likely" rather than asserted as fact, which matches where the investigation actually stood on 30 October, days before the FBI's own confirmation. One clause away from a clean base-fact score.
What actually happened
Binance, the world's largest crypto exchange, lost $6.3bn late on 29 October after an engineer's laptop was compromised, letting attackers drain "hot" wallets rather than crack any cryptographic keys. Multiple blockchain-forensics firms, including Elliptic, attributed the attack to the North Korean hacking unit TraderTraitor, and Binance pledged to cover all customer losses from its own funds.
Key facts
- Elliptic's chief scientist called it "almost certainly the single largest known theft of any kind," more than six times bigger than Saddam Hussein's $1bn 2003 theft from Iraq's central bank.
- The hack is more than four times the previous record, the $1.5bn Bybit theft attributed to the same North Korean group last year.
- More than $2.5bn of the $6.3bn was taken in a single transaction, and Binance said it froze about half the targeted funds.
- The FBI did not publicly confirm the North Korea link until days later: NPR reported the "FBI on Saturday confirmed that North Korea was behind the hack, confirming what experts had widely believed", and the Guardian's piece, published the Friday before, correctly used "likely" rather than stating it as fact.
- Separately, Al Jazeera later reported "Crypto firm Binance says it has covered 90 percent of losses from the multibillion-dollar hack", a detail the Guardian piece, written a day earlier, could not yet include.
What to watch for
Watch whether Binance's "cover all losses" pledge is fully delivered given later reporting put the figure at 90% recovered, not 100%. Also watch how long laundering takes: Chainalysis flagged "never seen before" laundering patterns, and the real test of attribution and asset recovery plays out over the following weeks and months as funds move through swap services and exchanges.
About this scoreThe R-Score is Rubbish Talk's editorial opinion on how far a headline's framing sits from what the underlying facts support. It is a judgement about presentation and emphasis, not an allegation that any outlet has acted dishonestly. Every figure we rely on is linked under Receipts so you can check it yourself.
