Binance resumes withdrawals in phases after a $6.3 billion cryptocurrency breach forced the exchange to suspend customer transactions. The company began restoring access Sunday, November 1, after covering approximately 95% of affected assets.
Binance said it would absorb the attack’s financial impact rather than pass losses to customers. The remaining 5% consists of less-liquid cryptocurrencies that require additional time to purchase in sufficient quantities.
Binance Resumes Withdrawals Across Major Networks
In its latest recovery update, Binance announced a gradual restoration of withdrawals by cryptocurrency network and asset type. The first phase includes Bitcoin, Ethereum, BNB, Solana, XRP and several other cryptocurrencies.
Customers can check the Binance network status page to determine whether withdrawals and deposits are available for specific assets. The exchange warned that temporary delays and longer processing times may occur as services reopen.
Binance described the withdrawal suspension as a precaution needed to contain the breach and complete security checks. The exchange had previously replenished 90% of stolen assets using company resources before increasing coverage to 95%.
FBI Identifies North Korean Hackers Behind $6.3B Theft
The FBI attributed the attack to TraderTraitor, a North Korean state-sponsored hacking group, on October 31. Investigators said the group stole more than $6 billion in cryptocurrency around October 29.
According to the FBI, the attackers have been converting stolen assets primarily into Ethereum. Authorities expect further laundering through decentralized finance platforms and cryptocurrency swap services.
Binance continues working with law enforcement and industry partners to recover stolen funds and strengthen its security systems. The company said it would publish a detailed incident report after completing its investigation.
Although withdrawals are returning, not all cryptocurrency networks have resumed normal operations. Binance says additional assets will become available as it completes security and operational checks.
