Binance says resuming withdrawals after major hack

Binance suffered a major cyberattack that affected more than $6 billion in funds. The exchange suspended user withdrawals after the attack because moving assets while systems were under threat could create further losses or security problems. Binance said user funds remained safe and that it would absorb the financial impact.

The suspension covered withdrawals from Binance, the world’s largest crypto exchange by daily trading volume. On Sunday, Binance reopened the first withdrawal phase for the Bitcoin network. It said it was restoring networks and assets gradually, rather than reopening everything at once.

The pause mattered because Binance needed to investigate the breach and complete stability and security checks. The company said it had set aside more than $6.34 billion in company funds to cover losses. The FBI accused North Korea of carrying out the attack, which was described as the biggest-ever crypto heist.

A cryptocurrency exchange is a platform where users can buy, sell, and trade digital currencies. It brings together orders from many customers and manages access to their accounts and assets. Binance is described as the world’s largest crypto exchange by daily trading volume.

In this context, a withdrawal means transferring cryptocurrency from a Binance account to another destination. That destination could be a personal wallet or another platform. Binance suspended withdrawals after the attack, so users could not immediately move their tokens out. The first network reopened was Bitcoin.

The restriction was a security measure during an emergency. Binance said it would restore each network and asset pair only after completing stability and security checks. It also planned to prioritize tokens according to user demand during the previous week. The phased process was intended to reduce risk while access returned.

The article reports that the hack affected more than $6 billion in funds. Binance later said it had set aside more than $6.34 billion in company funds to cover losses from the stolen assets. The article does not provide a separate, exact final figure for the amount actually stolen.

The heist is considered exceptionally large because the reported losses reach several billion dollars. That amount is far beyond an ordinary theft and threatens confidence in a major exchange. Binance said users would not bear the financial impact, promising that the company would absorb it instead.

The scale also explains the strong response. Binance halted withdrawals, then reopened access gradually after security checks. The FBI blamed North Korea for the attack. The event adds to a string of high-profile cyber thefts linked to North Korea and contributed to a sharp fall in most major cryptocurrency prices.

A phased reopening means Binance does not restore every withdrawal at the same time. It begins with selected networks and tokens, then adds others after reviewing conditions. Binance said Bitcoin was the first network opened in phase one, with the initial reopening planned between 0600 and 0900 GMT on Sunday.

The exchange said it would prioritize tokens using user-demand data from the previous week. Each network and asset pair would be restored separately. This approach lets Binance examine how a particular route operates before exposing more funds to it. It also limits the number of systems active while the response continues.

Security checks are important because the hack may have affected systems, processes, or connections used for withdrawals. Binance said stability and security checks had to be completed before access returned. The approach could make reopening slower, but it is designed to reduce further risk and protect users while normal service resumes.

The FBI accused North Korea of being behind the Binance attack. The accusation confirmed earlier suspicions from private investigators and analysts. The article links the operation to TraderTraitor, described as a Pyongyang-affiliated group.

TraderTraitor is therefore presented as the group believed to have carried out the hack. The article does not give its membership, structure, or specific methods. It identifies the group through its reported connection to Pyongyang and places the attack within a wider pattern of cyber theft.

The incident is described as the latest in a string of high-profile cyber thefts linked to North Korea. The country has built what the article calls a formidable hacking operation. Those activities are believed to generate funds that help finance North Korea’s weapons program. The FBI’s accusation makes the suspected origin a central part of the story.

A major exchange is a central meeting place for cryptocurrency trading. When it is hacked, users and investors may fear that their assets, withdrawals, or other exchanges could also face danger. That fear can spread beyond the affected platform because cryptocurrencies are traded in a connected global market.

For example, news of the Binance attack caused most major cryptocurrency prices to fall sharply on Friday. Investors may sell Bitcoin and other tokens to reduce exposure, raise cash, or avoid further uncertainty. Heavy selling can push prices down, while falling prices can encourage still more selling. This is a market-confidence effect.

The article gives the price drop but does not quantify its size or identify a single cause beyond the cyberattack news. Binance’s withdrawal suspension likely made the incident more visible and alarming. Its phased reopening and promise to cover losses may help restore confidence, but the article does not report the market’s later response.

A blockchain is a shared digital record of transactions. Network participants verify transactions and add them to a continuing ledger. Ownership is represented by control of cryptographic keys, which authorize transfers. The article does not explain this system, so this answer uses established background knowledge.

When users leave cryptocurrency on an exchange, the exchange commonly holds or manages the keys and processes withdrawals on their behalf. The user can see a balance in the exchange account, but the exchange controls whether a transfer is submitted to the relevant blockchain. A withdrawal request moves assets to an outside address after approval.

That arrangement explains how Binance could suspend withdrawals while public networks still existed. The Bitcoin network could continue operating, yet Binance could close its own withdrawal gateway. After the hack, Binance reopened that gateway in phases. Each network and asset pair required stability and security checks before access returned.