Binance Moves to Restore User Withdrawals After $6.3 Billion Crypto Heist

Binance, one of the world’s largest cryptocurrency exchanges, announced it has replenished approximately $5.7 billion of the $6.3 billion in digital assets stolen in a record-breaking heist, according to company statements reported by Business Insider. The company expects to resume user withdrawals soon, after utilizing both its corporate treasury and internal insurance funds to absorb the large-scale loss.

Scale and Impact of the Attack

Business Insider reports that this incident is believed to be the largest hack ever reported against a crypto platform by value. According to Binance, the breach rapidly drained billions of dollars in various cryptocurrencies from the company's wallets. Blockchain intelligence firms attributed the attack to the North Korean–linked hacker group known as TraderTraitor, previously named by the FBI in connection with other major crypto thefts. The hackers initially exploited a compromised employee laptop, but Binance later acknowledged that the attack was broader in scope.

Binance froze withdrawals for all users to prevent further losses and to assess the full extent of the breach. Stablecoin issuers responded by freezing funds in traceable currencies, further limiting the value accessible to the hackers. However, according to intelligence platform Elliptic, the hackers still managed to convert about $786 million into less traceable currencies, though the majority of the stolen funds remain potentially recoverable or traceable.

Remediation and Industry Implications

Binance’s emergency insurance fund, valued at about $1 billion, was insufficient to cover the scale of theft. To bridge the gap, Binance tapped its corporate treasury and accessed its Futures Insurance Fund, a pool typically used to protect traders against losses during extreme market conditions. Richard Teng, Binance’s co-CEO, stated on X that the company has replenished 90% of the stolen assets and is committed to covering the remaining 10%, ensuring that users “will not bear the financial impact of this incident.”

Binance plans to resume withdrawals on Sunday. The rapid replacement of user funds—$5.7 billion, as stated by company representatives—reflects both the exchange’s substantial resources and the imperative to restore customer confidence. The company pledged to continue sourcing crypto assets through market and private-channel purchases to bridge the outstanding gap.

The episode reinforces sector-wide concerns over structural vulnerabilities in crypto’s custodial infrastructure. The quick freezing of stablecoins highlighted both cooperation and tension between centralized issuers and the broader crypto ecosystem. Similar attacks have previously hit other exchanges: in 2025, the FBI named the same hacking group responsible for a $1.5 billion hack on Bybit.

Ari Redbord of TRM Labs told Business Insider that North Korean hackers likely move stolen funds into the country's weapons program. Redbord stated, “When North Korea steals at this scale, the money supports weapons proliferation, and every dollar we freeze or trace is a dollar the regime loses.”

Ongoing Risks

Binance’s swift response may limit immediate risk, but does not eliminate longer-term reputational or regulatory challenges. The frequency and scale of large hacks highlight persistent issues with balancing user accessibility and cybersecurity in the crypto sector. While Binance’s resources have allowed it to shield users from direct losses this time, smaller or less well-capitalized exchanges could be much more vulnerable to similar events.

The focus now shifts to Binance’s restoration of withdrawal access, any further disclosures about the breach, and potential changes to the firm’s insurance or security protocols. Future regulatory scrutiny is likely, especially given the involvement of North Korean actors and concerns tied to illicit finance and national security. Whether stronger preventive or remedial measures can be implemented across the sector is a question for both users and authorities.