Binance Withdrawal Resumption Triggers $2 Billion Outflow Following $6.3 Billion Security Breach
The Binance withdrawal resumption saw $2 billion move in three hours after the exchange restored access following a major cyberattack.
Binance Withdrawal Resumption Triggers $2 Billion Outflow Following $6.3 Billion Security Breach
The Binance withdrawal resumption saw $2 billion move in three hours after the exchange restored access following a major cyberattack.
Capital Flows Swiftly After Binance Reopens Outflows
Cryptocurrency exchange Binance began reopening customer withdrawals on November 1, exactly three days after suffering a record-breaking $6.3 billion security breach on October 29. The initial Binance withdrawal resumption was executed through a controlled rollout, with the Bitcoin network being the first to resume processing user requests.
Activity spiked rapidly upon the restoration of service. Within the first three hours of processing transactions again, approximately $2 billion moved across the platform as account holders initiated transfers.
To mitigate customer impacts, Binance stated that it has already covered roughly 95% of the stolen funds using its internal reserves. The exchange continues to bring additional network integrations back online following the disruption.
FBI Attributes Massive Heist to North Korean Operatives
The Federal Bureau of Investigation formally attributed the October 29 cyberattack to North Korea's TraderTraitor operation in an October 31 security notification. According to CoinDesk, the federal law enforcement agency released official confirmation of the perpetrators behind the theft, which resulted in more than $6 billion lost.
Working alongside the U.S. Secret Service and IRS Criminal Investigation, the FBI determined that the perpetrators primarily converted the stolen assets into Ethereum. Authorities warned that the hackers are attempting to pass these holdings through decentralized finance protocols and instant swap services to obscure their origin.
In response, the FBI published hundreds of cryptocurrency wallet addresses linked to the incident. The agency requested that THORNode operators, RPC node operators, instant exchange platforms, and DeFi service providers actively block transactions coming from the flagged addresses.
Impact of the Binance Withdrawal Resumption and DeFi Laundering Tactics
Blockchain analytics firm Chainalysis revealed that the perpetrators have employed sophisticated techniques across decentralized platforms to bypass asset freezes, which have currently locked down roughly $3 billion in stolen funds. As detailed by Chainalysis, the attackers converted TRX into stablecoins on Tron, deposited them into lending protocols to obtain receipt tokens immune to direct freezing, and later redeemed those tokens for stablecoins to bridge into Ethereum. Chainalysis successfully tracked around $500,000 processed through this specific method.
Separately, an unrelated technical error on THORChain temporarily disrupted another transfer route used by the hackers. An Ethereum blockchain reorganization led THORChain to issue a double refund on a 10 ETH deposit, triggering an automatic emergency pause across most of its cross-chain bridges.
Addressing the FBI's request for network operators to interdict funds, THORChain co-founder Chad Barraford noted that node operators possess no private information beyond public real-time data. Chainalysis added that while federal authorities listed hundreds of suspect wallet addresses, the attackers have already deployed thousands of addresses to execute their operations.
About The Author
