Skip to content
Crypto Bulletin

Markets, protocols and policy news

ID a87df1

Binance begins phased withdrawals after $6.3B hack

Binance began phased withdrawals on Sunday after suspending them over a hack that stole more than $6 billion from its wallets, while security checks continue.

Crypto Bulletin Newsroom 2 min read

Binance begins phased withdrawals after $6.3B hack

Binance began restoring customer withdrawals in phases on Sunday, two days after it suspended them following a $6.3 billion hot-wallet breach. In its recovery update, Binance said the first phase would reopen withdrawals across 15 networks, with assets released progressively as security checks clear.

Which withdrawals are returning first?

Binance’s first phase covers BTC, Ethereum, BNB, Tron, Solana, XRP, Zcash, Dogecoin, Toncoin, Polygon, Avalanche, Arbitrum, Base, Optimism and Sui networks. The exchange listed assets including BTC, ETH, BNB, SOL, XRP, DOGE and USDT, alongside several stablecoins and network tokens.

Binance said it would prioritize withdrawals based on user demand and reopen each network and asset pair after stability and security checks. Users may face delays during the rollout, it said. Deposits remain open.

Why did Binance suspend withdrawals?

Binance said it paused withdrawals to contain the breach, assess its impact and check affected services before restoring access. The exchange said it would cover the stolen funds and reported in the update that it had replenished about 95% of the impacted amount.

The attack affected Binance hot wallets, according to the company’s earlier incident update. Binance said the loss was about $6.3 billion and that it had worked with partners to freeze roughly $3 billion of affected assets.

What has Binance restored so far?

By Sunday morning, Binance had restored withdrawals for Bitcoin, Ether, BNB, XRP, Base, Dogecoin and Optimism, CBS News reported. The exchange said it would add more assets and networks as it completed checks.

The Federal Bureau of Investigation said North Korea was responsible for the theft and identified the activity as TraderTraitor. The FBI said the actors were converting stolen assets primarily into Ether.

Sources