Binance, the world’s largest cryptocurrency exchange, will resume withdrawals in phases after covering 95% of the $6.3 billion in tokens stolen from its platform in the largest digital heist on record.
The first phase is due to start between 0600 and 0900 GMT on Sunday and will include bitcoin, ether, BNB, Solana, XRP, dogecoin and other tokens, Binance said in a post on X late on Saturday, as reported by Reuters.
The remaining 5% of the stolen tokens consists of assets that are less liquid and may take longer to source in the required amounts, the company said. It has not given a date for when those withdrawals will fully resume, so the timing for that final tranche should be treated as unconfirmed for now.
The resumption marks the first step back towards normal service since Binance suspended withdrawals after the attack, which drained about $6.3 billion from its hot wallets in around 20 minutes on 29 October. The company has pledged to cover user losses from the theft.
It also follows the FBI’s announcement on Saturday that the North Korean state-sponsored unit known as TraderTraitor was responsible for the attack. The bureau said members of the unit had been observed converting stolen assets into ethereum and that it expected further laundering through related technology. Pyongyang has for years denied using state-linked cyber units for espionage, financial theft and revenue, and its mission in Geneva and embassy in China did not respond to requests for comment, Reuters reported.
For users, the phased restart is the practical test of Binance’s recovery plan. Covering 95% of the stolen tokens in value terms does not by itself restore every balance in every asset, and the less liquid remainder is precisely where delays are most likely. The exchange’s decision to stagger the reopening, rather than restore all withdrawals at once, suggests it is managing that sourcing risk token by token.
The wider crypto market will also be watching whether withdrawals proceed smoothly. The heist rattled markets when it emerged, and a disorderly reopening could revive the uncertainty that followed the theft. A clean, phased return, by contrast, would support Binance’s argument that customers will not ultimately bear the loss.
Sources: Reuters, “Binance to resume withdrawals after recovering bulk of $6 billion in stolen funds”, 1 November 2026, https://www.reuters.com/legal/government/binance-resume-withdrawals-after-recovering-bulk-6-billion-stolen-funds-2026-11-01/ ; Reuters, “FBI links North Korea to theft of $6 billion from Binance”, 31 October 2026, https://www.reuters.com/world/fbi-links-north-korea-theft-6-billion-from-binance-2026-10-31/
