Binance restarts withdrawals after covering 95% of $6.3 billion theft

Binance began phased withdrawals on Sunday after replacing 95% of the $6.3 billion stolen in a hack the FBI links to North Korea's TraderTraitor group.

Digital vault with a broken padlock and a gold coin symbol, representing a crypto exchange theft
Binance is restoring withdrawals in phases after a major theft. Illustration: AI-generated.

Key points

  • Binance began phased withdrawals on Sunday, 1 November 2026, after securing 95% of the $6.3 billion stolen on Thursday.
  • The first phase covers 15 cryptocurrencies, including bitcoin, ether, XRP and dogecoin.
  • The FBI blames TraderTraitor, a North Korean state-backed hacking unit; Pyongyang has long denied such activity.
  • Binance says users will not bear the losses and a post-incident report will follow.

What happened

Binance, the world’s largest cryptocurrency exchange, began bringing withdrawals back in stages on Sunday, 1 November 2026. According to reports in Reuters, Times of India and Mint, it has now replaced or secured 95% of the $6.3 billion worth of tokens taken from it on Thursday.

The first phase covers 15 cryptocurrencies, including bitcoin, ether, XRP and dogecoin, Mint reported. Bitcoin withdrawals restarted shortly after 0600 GMT. Other affected assets are due to follow in later stages.

The last 5% is made up of less liquid tokens, meaning they are harder to buy in large quantities quickly. Binance said sourcing them may take more time.

Binance began phased withdrawals on Sunday, 1 November 2026, after securing 95% of the $6.3 billion stolen on Thursday.

How Binance covered the loss

Binance said it bought replacement tokens with its own money, drawing on its SAFU reserve, its Futures insurance fund and its corporate treasury. SAFU is a reserve the exchange keeps to protect customers after security breaches. Mint reported that Binance had earmarked about $6.34 billion of its own funds.

The exchange said it froze withdrawals as a precaution while it contained the damage and ran security checks. It has said customers will not be made to absorb the loss, and it plans to publish a report once its investigation is complete.

What it means for you

If you hold crypto on Binance, the company says customers will be fully reimbursed and withdrawals are returning in stages, with major tokens first. Check which assets are live before attempting a transfer, as other tokens are still to be restored.

Background

The FBI has pinned the breach on TraderTraitor, a hacking unit sponsored by North Korea’s state, and said its members were converting the stolen assets into Ethereum. It expects more laundering attempts through decentralised finance (DeFi) platforms and instant swap services. It also asked exchanges and analytics firms to block transactions tied to identified addresses. North Korea has for years denied using state-linked cyber units for financial theft.

US President Donald Trump said on Saturday, “We don’t know if it’s North Korea,” according to Times of India.

TraderTraitor has also been linked to a $1.5 billion hack of Bybit last year. Mint noted that WazirX also lost $235 million in an earlier attack.

What it means for you

Binance says customers will be fully reimbursed and that it, not users, bears the loss. Withdrawals are returning in phases, starting with major tokens such as bitcoin and ether. The episode shows that even the largest exchanges face security risk, so users may want to understand how their platform protects customer assets.

Currency Converter

Frequently asked questions

When did Binance resume withdrawals?

Binance began the first phase on Sunday, 1 November 2026, with bitcoin withdrawals restarting shortly after 0600 GMT.

Will Binance users lose money from the theft?

Binance has said users will not bear the financial impact and that customers will be fully reimbursed.

Who does the FBI blame for the attack?

The FBI attributes it to TraderTraitor, a North Korean state-sponsored hacking unit. North Korea has long denied using state-linked cyber units for theft.

Sources

  1. Binance to resume withdrawals after recovering 95% of $6.3 billion crypto theft — Times of India — Business
  2. Crypto Heist: Binance To Resume Withdrawals After Covering 95% Of $6.3 Billion Theft — NDTV Profit
  3. Binance resumes bitcoin, ether withdrawals after recovering 95% of $6.3 billion in crypto theft; check details — Mint — Companies

This article is for information only and is not investment, tax or legal advice. Figures are from the sources linked above as of the publish or update time. Please verify with official sources or a qualified adviser before making financial decisions.