4th November, 2026
By Shubhii Verma
Binance says customer withdrawals are stabilising after a security breach attributed by the FBI to North Korea-linked hackers resulted in approximately $6.3 billion in stolen digital assets. The world’s largest cryptocurrency exchange has resumed operations through a phased withdrawal process while working to restore confidence.
Binance Withdrawals Stabilise as Exchange Replaces Stolen Assets
Customers withdrew a reported $3.64 billion, equivalent to 2.1% of the exchange’s assets, after the incident. Binance said deposits remained substantial and that outflows had begun to settle following an initial surge. The company reported $171 billion in assets under management as of October 28 and approximately 335 million registered users worldwide.
Binance said it had replaced around 95% of the stolen assets using company funds. The remaining tokens are less liquid and may take longer to source. Withdrawals are being restored in stages, prioritising assets according to recent customer demand. Bitcoin, Ether, selected stablecoins and Dogecoin were among the tokens included in the initial phase.
FBI Links $6.3 Billion Binance Hack to North Korean Hackers
The FBI identified the North Korean state-linked group TraderTraitor as responsible for the October 29 attack. Investigators said stolen funds were converted into Ether and could face further laundering through decentralised finance platforms and instant swap services.
The incident unsettled broader markets. Bitcoin and Ether recovered slightly after reaching lows, while spot Bitcoin exchange-traded funds recorded significant withdrawals and leveraged positions faced heavy liquidations. The combined market capitalisation of two leading stablecoins also declined.
Blockwind News ANALYSIS
What the Binance Hack Means for Crypto Exchange Security
The stabilisation of Binance withdrawals is an important signal, but it does not establish that customer confidence has fully recovered. Outflows measure immediate behaviour, while trust depends on whether users believe the exchange can prevent another breach and provide access to funds during a crisis.
Binance’s decision to cover most losses with corporate capital may limit direct customer damage. However, replacing stolen assets is not a substitute for stronger security, transparent wallet controls and independent verification of reserves. The incident also highlights the risks of concentrating custody on a single platform.
For institutional investors, the breach reinforces the importance of diversified custody, cold storage and clear counterparty risk limits. Crypto markets may regain price stability faster than confidence in centralised exchanges. Binance’s next challenge is demonstrating that its security systems, operational resilience and disclosures can withstand scrutiny beyond the recovery period.
Regulators and market participants will watch how quickly investigators trace remaining funds, whether recovery efforts succeed, and what safeguards Binance introduces before normal operations resume across its user base.
