Omanghana
Binance has begun restoring cryptocurrency withdrawals in stages following a security breach that resulted in the theft of approximately $6.3 billion in digital assets.
The exchange started reopening withdrawal services on Sunday, November 1, 2026, after suspending them to carry out security checks. The attack occurred on October 29 and is considered the largest cryptocurrency theft on record.
Binance Says 95% of Affected Assets Replaced
Binance says it has replaced approximately 95% of the affected assets using company resources. It said the remaining 5% consists of less-liquid tokens that may take longer to purchase in the required quantities.
The exchange has pledged to absorb the financial impact of the theft rather than pass it on to customers. It said the replacement effort has used its corporate treasury, part of its Secure Asset Fund for Users and a portion of its Futures Insurance Fund.
Binance also said approximately $3 billion in affected assets had been frozen with the help of law enforcement, token issuers and other partners. Efforts to recover the stolen funds are continuing.
Withdrawals Return Gradually
The first phase of the rollout includes major assets and networks such as Bitcoin, Ethereum, BNB, XRP, Solana, Dogecoin and certain stablecoins. Binance said further assets would be added as security checks are completed.
The company warned that heavy traffic could cause delays and advised customers to check whether their selected asset and network were available before attempting a withdrawal.
Binance reported approximately $3.64 billion in net outflows during the first nine and a half hours after withdrawals began to resume. The figure reflects about $4.65 billion in withdrawals offset by $1.01 billion in deposits.
Binance.US, a separately operated exchange serving U.S. customers, said it was not affected by the incident.
FBI Attributes Attack to North Korea
The FBI has attributed the theft to North Korean state-sponsored cyber activity it tracks as TraderTraitor.
Binance initially said a compromised engineer’s laptop may have been involved. Its subsequent investigation identified additional points of breach, and the company said it would release further details once its investigation was complete.
Source: Omanghana
