Binance withdrawals spike then stabilize after $6.3B North Korea-linked hack
The exchange reopened after covering 95% of stolen funds, but customers pulled $3.64 billion on the first day back.
What to know
- Binance resumed service after covering 95% of the $6.3 billion stolen in what analysts call possibly the largest financial robbery ever.
- The FBI attributes the attack to North Korea's TraderTraitor unit, but President Trump says North Korean involvement is still unconfirmed.
- Customers withdrew $3.64 billion (2.1% of assets) on reopening; Binance says outflows are now stabilizing while third-party trackers like DefiLlama show higher, still-rising figures.
- Crypto markets took a hit — bitcoin and ether touched multi-week/month lows and stablecoin market caps and bitcoin ETFs saw outflows — with partial recovery over the weekend.
“A hack at a financial institution means stolen usernames and passwords. A hack at a crypto exchange is bank robbery at the speed of the internet, which creates an unstable risk profile for anyone responsible for other people's capital.”
Ari Redbord, Global head of policy, TRM Labs · Investing.com ↗ · Nov 1
Binance World's largest cryptocurrency exchangeFBI US law enforcement agencyTraderTraitor (North Korea) Alleged state-sponsored hacking unit
Donald Trump US PresidentAri Redbord Global head of policy, TRM LabsJay Koh Vice president, Asia Web3 AI Association
How it unfolded 2 developments, newest first · click a bar or a number to jump articles
-
2
Markets show tentative recovery as Binance reports stabilizing flows
Bitcoin, which hit a six-week low on Friday, recovered to above $78,000 and ether to $2,287, even as stablecoin market caps fell $1.2 billion and spot bitcoin ETFs shed $643 million; Binance said withdrawals were stabilizing and deposits remained substantial.
“A hack at a crypto exchange is bank robbery at the speed of the internet, which creates an unstable risk profile for anyone responsible for other people's capital.”
— Ari Redbord -
background
Customers withdraw $3.64 billion as exchange reopens — Binance customers pulled $3.64 billion, or 2.1% of assets, in an initial spike upon the exchange's return to service, with withdrawals rolled out in phases prioritizing 15 tokens including bitcoin, ether, USDC, USDT and dogecoin.
-
1
Binance returns online after covering 95% of stolen assets
Binance said it used company money, including its $1 billion SAFU reserve, to buy replacement tokens covering $6 billion of the stolen crypto, with the remaining 5% in less liquid assets expected to take longer to source.
-
first by NY Post, 9d ago · also Channel News Asia, The Hindu, Indian Express, Investing.com News, Reuters, RTÉ
2 more headlines
- Binance sees outflows stabilising as exchange returns online after US$6.3 billion heist Channel News Asia · 9d ago
- Binance sees outflows stabilising as exchange returns online after $6.3 billion heist The Hindu · 9d ago
-
-
background
Trump says North Korea's role remains unclear — Speaking to reporters, Trump declined to confirm North Korean involvement despite the FBI's attribution and analysts' findings.
-
background
FBI attributes the attack to North Korea's TraderTraitor unit — The FBI said the North Korean state-sponsored unit known as TraderTraitor was responsible, and that it observed stolen assets being converted into ether, expecting further laundering.
-
background
Blockchain analysts link the heist to North Korea — US blockchain analysis firms TRM Labs and Chainalysis said the attack bore similarities to previous large thefts blamed on North Korea.
-
background
Hackers steal $6.3 billion from Binance in ~20 minutes — The bulk of the theft occurred late Thursday in around 20 minutes, in what analysts believe may be the biggest financial robbery ever.