Exchange Reopens Phased Withdrawals After Mass Capital Flight

Cryptocurrency exchange Binance reported that customer withdrawal activity is normalizing after a high-profile Binance security breach resulted in the theft of approximately $6.3 billion on October 29, 2026. Unauthorized transactions drained hot-wallet systems across multiple blockchain networks, prompting the venue to immediately halt withdrawals and initiate system reviews.

To reassure depositors, Binance allocated more than $6.34 billion from corporate reserves, including its Secure Asset Fund for Users (SAFU) and Futures Insurance Fund, to guarantee complete coverage for user losses. By November 1, the platform had replenished roughly 95% of the affected tokens—equivalent to about $6 billion—through internal funds and open-market purchases.

Phased withdrawal services officially resumed on November 1 across 15 network ecosystems, including Bitcoin, Ethereum, BNB Smart Chain, Solana, and XRP. On-chain tracking data from DeFiLlama recorded $2.51 billion in net outflows during the first day of restored access, driven primarily by $1.083 billion in USDT and $912 million in Bitcoin transfers. Binance co-founder Yi He stated on social media platform X that processing was proceeding smoothly despite heavy user request volumes.

State-Sponsored Hacking Group Linked to the Binance Security Breach

Investigations by blockchain intelligence firms TRM Labs and Chainalysis, alongside official alerts from the FBI, attributed the intrusion to TraderTraitor, a state-sponsored cybercrime unit affiliated with North Korea. Federal authorities issued public wallet advisories identifying addresses controlled by the perpetrators to assist industry venues in blocking secondary transfers.

While international partners and law enforcement managed to freeze approximately $3 billion in traceable tokens across centralized platforms, unmanaged networks remain harder to recover. The Bitcoin portion of the heist—comprising 18,270 BTC valued at roughly $1.4 billion at the time of the event—was distributed across 19 separate addresses, where the funds have remained motionless.

Public ledgers show that spectators have since sent hundreds of micro-transactions under one dollar to these illicit addresses using Bitcoin's OP_RETURN transaction field. These tiny payments carry permanent public ledger messages ranging from solicitations for stolen funds to promotional token pitches.

Market Reaction and Reserve Verification

The initial announcement of the breach pushed Bitcoin prices down to a six-week low on Friday before broader markets stabilized. By Monday, November 2, Bitcoin rebounded above $78,000, signaling a pause in panic selling as Binance published an updated Proof of Reserves snapshot reflecting new operational wallet structures.

According to public updates from the exchange, core crypto assets such as BTC, ETH, USDT, USDC, Solana, and BNB are now fully backed by verified holdings. Binance confirmed that it will continue working with law enforcement agencies and security providers to track down the remaining unrecovered tokens.