Crypto crime: hacks, rug pulls, memecoins, stablecoins and rules
Exchange and DeFi hacks, crypto investment scams, rug pulls, memecoins, ICOs, stablecoin rules and crypto AML in the US, Brazil and worldwide, with sources.
Binance: about US$6.3bn stolen (Oct 2026)
Attributed to the North Korea-linked TraderTraitor group via a DevOps engineer's compromised laptop. About US$3bn was frozen. Likely the largest crypto theft on record.
US: US$11.4bn in crypto-related losses in 2025
The FBI IC3 received 181,565 crypto-related complaints (losses +22%). Crypto investment fraud alone reached US$7.2bn.
Brazil: central bank rules for virtual asset providers
BCB Resolutions 519, 520 and 521/2025 created licensing for virtual asset service providers, require AML/CFT controls and bring virtual assets into the FX market. In force since 02/02/2026; existing firms have 270 days to apply.
Self-custody wallet transfers above US$10k now reported to COAF
BCB Resolution 588/2026 (in force since 01/10/2026) added automatic reporting of virtual-asset transfers to or from self-custody wallets from US$10k. Resolution 589/2026 bars dealing with unauthorized providers from 06/11/2026.
Binance's US$4.32bn DOJ settlement (2023)
US$2.51bn forfeiture and a US$1.81bn fine, plus coordinated settlements with FinCEN, OFAC and the CFTC and a three-year monitor.
Bybit: US$1.5bn stolen (Feb 2025)
The FBI attributed it to North Korea's TraderTraitor group — the same group named in the 2026 Binance case.
| Losses | |
|---|---|
| 2024 | US$ 9.32 bi |
| 2025 | US$ 11.366 bi |
Source: FBI IC3 Annual Reports 2024–2025 ↗
| Value | |
|---|---|
| Binance (out/2026) | US$ 6.3 bi |
| Bybit (fev/2025) | US$ 1.5 bi |
Source: The Record; Help Net Security ↗
- — Binance hit by ~US$6.3bn crypto theft attributed to North Korea · ~US$ 6,3 bi. Early report: a DevOps engineer's laptop was compromised by TraderTraitor; ~US$3bn frozen. Possibly the largest crypto theft ever. Source: The Record; Help Net Security
- — Polymarket loses over US$2.1m to wallet drainer via DebugBear · > US$ 2,1 mi. Malicious code injected through third-party vendor DebugBear drained users' wallets at the prediction market. Source: The Record
- — Trezor: shipping partner breach fuels phishing attacks. Data leaked from the crypto wallet maker's logistics partner is being used to phish customers. Source: Help Net Security
- — Crypto wallet SafePal exposes order data of 39,798 customers. The breach hit customer order information at the hardware wallet maker. Source: Help Net Security
- — Crypto-linked losses reach US$11.4bn in the US in 2025 · US$ 11,37 bi. IC3 logged 181,565 crypto-related complaints, with losses 22% above 2024 (US$9.32bn). Source: FBI IC3 2025 (cópia do PDF via Finsiders Brasil)
- — Bybit loses US$1.5bn in crypto theft attributed to North Korea · US$ 1,5 bi. The FBI attributed the US$1.5bn theft at the Dubai-based exchange to North Korea's TraderTraitor group. Source: Help Net Security