Binance Says It Replaced 95% of Stolen Crypto for Users

Binance

Binance began restoring withdrawals in phases Sunday (Nov. 1) at 06:00 UTC (1 a.m. EST), and by about 6½ hours later resumed withdrawals for the 15 networks and assets in the first phase, the company said in a post on X.

    Get the Full Story

    Complete the form to unlock this article and enjoy unlimited free access to all PYMNTS content — no additional logins required.

    Subscribe to our daily newsletter, PYMNTS Today.

    By completing this form, you agree to receive marketing communications from PYMNTS and to the sharing of your information with our sponsor, if applicable, in accordance with our Privacy Policy and Terms and Conditions.

    Binance had paused withdrawals after hackers stole $6.3 billion from its cryptocurrency exchange late Thursday (Oct. 29). PYMNTS reported Friday that this was the biggest crypto theft ever.

    Announcing the first phase of restoration of withdrawals in its Sunday post on X, Binance said: “After an initial spike, withdrawal volumes have declined and are stabilizing as expected, while deposit volumes have remained substantial.”

    We’d love to be your preferred source for news.

    Please add us to your preferred sources list so our news, data and interviews show up in your feed. Thanks!

    During that initial 6½-hour period, Binance processed $4.649 billion in withdrawals and $1.01 billion in deposits. The net outflow of about $3.64 billion amounted to 2.1% of the company’s $171 billion in total assets under management, Binance said in the post.

    Binance said in an earlier security incident update on its website that it would restore withdrawals in phases, with the first phase beginning between 06:00 and 09:00 UTC (1 a.m. to 4 a.m. EST) Sunday. The company said that each phase would include different groups of networks and assets and that it would share updates through its X channel. It also shared the information on a Deposit & Withdrawal Status page on its website.

    “Since the incident, our teams have taken precautionary measures to safeguard the platform, conducted security assessments, and worked to verify the readiness of affected services,” Binance said in the update. “We aim to restore withdrawals progressively as we complete security and readiness checks. Deposit services remain open and are not affected by the incident.”

    Binance also reiterated its earlier statements that users’ funds remain safe and that the company will absorb the financial impact of the losses.

    “Binance has now covered approximately 95% of the impacted amount, up from 90% in our prior update,” the company said in the update. “The outstanding 5% are tokens outside the top ten [listed in the post], and are less liquid in the market and take longer time to source at the required scale.”

    The FBI said in a Saturday (Oct. 31) press release that North Korea’s illicit cybercrime and virtual asset theft activities dubbed “TraderTraitor” were responsible for the theft from Binance. The FBI shared a list of addresses that hold or have held assets from the theft, and it asked private sector entities to block transactions tied to those addresses.

    Binance said in a post on X: “We sincerely thank [FBI Cyber] for their strong support during this challenging time.”