Binance Resumes Withdrawals: 95% of Stolen Assets Covered, FBI Points to North Korean Hacker Group
nashnova research
Binance began phased withdrawal resumption after a $6.3 billion hack, pledging to absorb all losses itself; the FBI confirmed North Korean group TraderTraitor as the attacker, with stolen funds being converted to Ethereum.
$6.3 billion stolen — how can Binance promise users won't pay?
Binance announced on November 1, 2026 that it would begin phased withdrawal resumption, after a hack drained roughly $6.3 billion in crypto assets and triggered a full deposit-and-withdrawal freeze.
The platform says it has already covered 95% of the stolen assets; the remainder is still being repurchased due to "low market liquidity and the time needed for large-scale buying."
This means → Binance is using its own capital to fill the gap rather than passing losses to users. That pledge is central to user trust — but whether the remaining 5% can be fully covered, and when, is still an open question.
How far along is the withdrawal resumption?
Resumption is proceeding by network and asset type: as of Sunday morning, Bitcoin deposits and withdrawals remain partially suspended, Ethereum deposits are back to normal while withdrawals are partially paused, and status varies across other chains.
Binance warned users that concentrated traffic may cause "temporary delays or extended processing times."
In plain terms = not every token can be withdrawn immediately. Which chain opens first depends on security-review progress, and users need to check the status of each asset they hold.
Why did the FBI name a North Korean hacker group?
The FBI issued a statement on Saturday confirming that the attack was carried out by North Korean hacker group TraderTraitor.
The bureau noted that the group is converting the stolen assets primarily into Ethereum and may carry out further money-laundering operations.
This reflects two signals: North Korean state-level hackers now pose a direct threat to the largest crypto platforms, not just smaller exchanges; and the FBI's official attribution backs Binance's earlier claim — but also means fund recovery will be extremely difficult.
What should we watch next?
The repurchase progress on the remaining 5% of stolen assets is the key indicator of how much financial pressure Binance is under.
When security reviews across all chains are fully completed will determine whether withdrawals move from "phased" to "fully restored."
Binance has pledged a detailed incident report after the investigation concludes — the transparency of that report will directly shape long-term market confidence in the platform's security.
市场有风险，内容仅供研究参考，不构成投资建议。