Binance announced that it will gradually restore customer withdrawals, starting with a limited window on November 1st from 2 p.m. to 5 p.m. Singapore time. The move follows a record‑sized theft that exceeded $6 billion and forced the world’s largest digital‑asset exchange to halt all transactions.
The exchange said the first phase will focus on the most demanded assets, with additional cryptocurrencies and blockchain networks being re‑enabled after thorough security and stability checks. Binance will not reopen all withdrawals at once but will instead resume services gradually, prioritising those assets that saw the highest withdrawal volume in the week before the breach.
The breach, disclosed on Thursday, led Binance to suspend withdrawals early Friday across Asia. The FBI linked the attack to the North Korean hacking group TraderTraitor, which had previously been identified in the $1.5 billion theft from Bybit in 2025.
Binance has replaced roughly 90 % of the stolen holdings and reiterated that customers will not incur any financial losses. The stolen assets included Bitcoin, Ether, and the dollar‑backed stablecoins USDT and USDC. Co‑CEO Richard Teng said the firm could cover the losses from its operating‑revenue‑generated cryptocurrency holdings, while co‑CEO Yi He noted that annual revenue would be sufficient to absorb the impact.
Bitcoin traded near $77,700 on Sunday, about 5 % below the Thursday high before the attack, and the broader crypto market showed limited price swings. Binance currently holds about $135 billion in assets, far outstripping rivals such as OKX, which holds roughly $29 billion, according to DefiLlama. The exchange’s Secure Asset Fund for Users, established in 2018, remains near its $1 billion reserve to protect customers during exceptional incidents.
Investigators are examining a potentially compromised software engineer’s laptop and other possible entry points as part of the ongoing inquiry.