Binance resumes bitcoin, ether withdrawals after recovering 95% of $6.3 billion in crypto theft; check details
Binance, the world's largest cryptocurrency exchange, resumed withdrawals of Bitcoin, Ethereum and some other cryptocurrencies on Sunday after covering 95% of the $6.3 billion in tokens stolen from its platform.
The incident has been described as the world's largest digital heist, with the Federal Bureau of Investigation (FBI) linking the attack to North Korea.
This is not the first time a cryptocurrency exchange has suffered a major cyberattack. Companies such as WazirX and Bybit have also been targeted, in which they lost $235 million and $1.5 billion, respectively.
Quick answers to key questions
•5 QUESTIONS
1
When did Binance resume Bitcoin and Ethereum withdrawals after the $6.3 billion theft?⌵Binance resumed withdrawals on Sunday after pausing them following the attack. Bitcoin withdrawals restarted shortly after 0600 GMT.
2
Which cryptocurrencies could users withdraw when Binance reopened withdrawals?⌵Binance restored withdrawals for 15 cryptocurrencies in the first phase, including Bitcoin, Ether, XRP and Dogecoin. Withdrawals for other affected assets were to return in phases.
3
Why did Binance temporarily suspend cryptocurrency withdrawals?⌵Binance said it paused withdrawals as a precaution to contain the loss, assess the impact and complete security checks. The exchange said users would not bear the financial impact.
4
How is Binance replacing the cryptocurrency stolen in the hack?⌵Binance said it used its own funds to buy replacement tokens, drawing on its SAFU reserve, Futures insurance fund and corporate treasury. The remaining stolen assets were less liquid and could take longer to source.
5
Who did the FBI identify as responsible for the Binance crypto theft?⌵The FBI attributed the attack to TraderTraitor, a North Korean state-sponsored hacking unit. Reports cited in the articles said the attackers prepared in advance and used automation to move and launder funds quickly.
North Korean hackers were held responsible for both attacks.
The exchange said it would be using its own funds to purchase replacement tokens and compensate for most of the stolen amount. Withdrawals of other affected cryptocurrencies will be restored in phases.
In the first phase, Binance restored withdrawals for 15 cryptocurrencies, including major ones such as Bitcoin, Ether, XRP and Dogecoin. Bitcoin withdrawals resumed shortly after 0600 GMT on Sunday.
The remaining 5% of stolen tokens consists of assets that are less liquid and may take longer to source in the required amounts, the Changpeng Zhao-owned crypto exchange said in an official release this morning.
The suspected hackers behind the massive $6.3 billion Binance theft seemingly combined familiar hacking tactics with extraordinary speed and automation, raising concerns regarding the use of artificial intelligence (AI) and how it could supercharge their already sophisticated methods.
The FBI said on Saturday the North Korean state-sponsored unit known as TraderTraitor was responsible for the attack.
However, Pyongyang has for years denied using state-linked cyber units for espionage, financial theft and revenue, according to a report by Reuters.
Citing researchers at TRM Labs, an Axiom report said that the hackers started preparing for this attack around 36 hours before it began. They also laundered the stolen funds and wiped out evidence of their operations at an unprecedented speed, indicating they used automation throughout the heist.
Binance previously said that it had allocated around $6.34 billion from its own funds to cover the losses. The money spent re-buying tokens came from using part of its $1 billion secure asset fund for users (SAFU), some of its Futures insurance fund and the company's own corporate treasure, it said on X.
SAFU is a bitcoin reserve that the crypto exchange holds to protect customers in the event of security breaches or digital heists.
The withdrawals were paused after the attack as a precaution to contain the loss, assess impact and complete security checks Binance reiterated that it will bear the financial impact and that losses will not be passed to users. A post-incident report will follow once the investigation concludes, it said in a release.
Eshita Gain is a digital journalist at Mint, where she joined in May 2025. She writes on corporate developments, personal finance, markets, and business trends, with a focus on delivering timely and relevant stories to a broad audience. <br><br> While her core beat lies in business and finance, she is not confined to a single niche and frequently explores stories across domains, including international relations and policy developments. <br><br> She holds a postgraduate diploma in business and financial journalism by Bloomberg from the Asian College of Journalism (ACJ), Chennai. During her time there, she received rigorous training in tracking financial data, interpreting corporate filings, and reporting on business developments. She has pursued her graduation from St. Joseph’s University, Bengaluru in a multi-disciplinary course. Her majors included Journalism, International Relations, peace and conflict studies. <br><br> Eshita has previously worked in digital marketing, which enables her to write SEO friendly copies that are clear and engaging. <br><br> Her primary interest lies in breaking down complex subjects and writing clear, accessible copies that inform readers. She aims to bridge the gap between technical financial language and everyday understanding. Outside the newsroom, Eshita enjoys reading non-fiction, and exploring new places, constantly seeking fresh perspectives and stories beyond headlines.
Catch all the Business News , Corporate news , Breaking News Events and Latest News Updates on Live Mint. Download The Mint News App to get Daily Market Updates.
More
✕
Wait for it…
Oops! Looks like you have exceeded the limit to bookmark the image. Remove some to bookmark this image.