Binance Resumes Withdrawals Following Massive $6 Billion North Korean Cyberattack
Binance initiates phased withdrawal recovery while FBI links record-breaking theft to North Korean actors.
1Phased Withdrawal Restoration Process
Binance is initiating a phased withdrawal recovery starting between 06:00 and 09:00 UTC today. The initial phase covers 15 major networks, including Bitcoin, Ethereum, and Solana. Users may experience temporary traffic delays during this rollout. The exchange confirmed that deposits remained operational throughout the entire duration of the security incident.
2Asset Replenishment Status Update
The exchange has successfully replenished 95% of the stolen assets, an increase from the 90% reported on Saturday. Major holdings like BTC, ETH, USDT, and BNB are now fully backed. The remaining 5% involves less-liquid tokens, which are currently being sourced through ongoing market and over-the-counter purchase operations for users.
3FBI Attribution to North Korea
The FBI has formally attributed the $6 billion theft to North Korean hackers, linking the attack to the state-sponsored 'TraderTraitor' cyber campaign. Federal agencies, including the Secret Service and IRS, are actively tracking the stolen funds. They have urged industry participants to block all transactions associated with identified attacker-controlled wallet addresses.
4Laundering Tactics and DeFi Risks
Attackers are reportedly converting stolen digital assets into Ethereum to facilitate laundering. The FBI warns that these illicit funds are being moved through decentralized finance platforms and instant-swap services. Industry participants, including blockchain analytics firms and DeFi operators, are now under pressure to monitor and restrict these specific laundering channels immediately.
5Commitment to User Protection
Binance has explicitly promised to absorb the entire financial impact of the breach rather than passing losses to its user base. The company is prioritizing the restoration of liquidity for all affected assets. A comprehensive post-incident report is scheduled for release once the ongoing internal and external investigations are officially concluded.
6Political and Regulatory Response
US President Donald Trump has addressed the incident, stating he intends to engage in discussions with North Korean leadership regarding the attribution. This high-level political involvement highlights the severity of the $6 billion theft. The incident marks a significant escalation in state-sponsored cyber warfare targeting global financial infrastructure and digital assets.
7Operational Security and Future Outlook
The exchange is conducting rigorous security and operational checks before enabling each withdrawal phase. Additional networks and tokens will be integrated into the withdrawal system as soon as they are deemed secure. This methodical approach aims to prevent further vulnerabilities while restoring full platform functionality for the global user base.
8Industry Impact of Large-Scale Hacks
This $6 billion theft represents the largest recorded cryptocurrency heist in dollar terms. The event forces a re-evaluation of security protocols across the entire DeFi ecosystem. As exchanges and regulators coordinate to freeze stolen assets, the incident underscores the persistent threat posed by sophisticated state-sponsored actors to global financial stability.