Binance withdrawal scams threat

Binance issued a security advisory warning customers about potential scams exploiting withdrawal delays following a $6.3 billion security breach. Fraudsters are attempting to take advantage of the phased withdrawal reopening by impersonating Binance representatives.

The fraudulent activities involve offering customers assistance with delayed transactions, compensation claims, and asset recovery through emails, direct messages, and group chats. Some malicious communications include small cryptocurrency transfers carrying harmful instructions.

Scammers have promised to speed up pending withdrawals or sell priority access to withdrawal queues. Other tactics include instructing users to transfer their holdings into external wallets presented as secure options.

Exchange asset recovery and reserves

Binance emphasized that it does not charge fees to unlock withdrawals or ask customers to authorize wallet transactions. The exchange completed a zero-knowledge proof for its October 31 reserve snapshot to let users independently verify asset backing.

The verification process applies to ten major cryptocurrencies, including Bitcoin, Ethereum, BNB, XRP, Solana, Zcash, and four stablecoins. Users can confirm their balances are backed at least 1-to-1 without revealing individual account holdings through the official platform.

Regarding stolen funds, Binance reported that approximately 95 percent of impacted assets have been replaced using company resources. The remaining 5 percent consists of less liquid cryptocurrencies that require additional time to acquire through market purchases and over-the-counter transactions.

According to Bitcoin Magazine, the security breach occurred when hackers drained approximately $6.3 billion from the platform hot wallets in what is considered the largest cryptocurrency theft on record. Out of the affected assets, about $3 billion was successfully frozen through stablecoin operators, leaving around $3.3 billion unrecovered. Furthermore, blockchain intelligence firm TRM Labs attributed the attack to a group known as North Korea's TraderTraitor, according to Bitcoin Magazine.

According to Bitcoin Magazine, the recovery effort began on a Saturday, during which the exchange utilized resources from its Secure Asset Fund for Users, a portion of its futures insurance fund, and its corporate treasury to purchase replacement tokens. The exchange then restarted customer withdrawals in stages over the weekend, beginning with Bitcoin before expanding access to additional networks including Dogecoin, Tron, Polygon, Avalanche, and Sui.

According to CryptoSlate, the recent zero-knowledge proof verification applies specifically to balances recorded at midnight UTC on October 31. The exchange noted that this process does not establish its current financial position or independently audit its overall solvency.