Binance resumes withdrawals after $6bn crypto hack

The hack forced Binance to suspend user withdrawals, temporarily preventing customers from moving their digital assets off the exchange. This mattered because withdrawals are the main way users regain direct control of funds held through an exchange. Binance later resumed access, but not everywhere at once.

The first network reopened was the Bitcoin network. Binance called it the first batch in phase one and said it expected to begin reopening withdrawals between 0600 and 0900 GMT on Sunday. That made Bitcoin the initial test of its restored withdrawal system.

Binance said the process would be gradual. It planned to prioritize tokens using user-demand data from the previous week, while completing stability and security checks for each network and asset pair. The company also said user funds remained safe and promised to absorb the stolen-funds impact.

A cryptocurrency exchange is a digital marketplace for buying and selling assets such as Bitcoin. Users typically deposit money or crypto, place orders, and receive the purchased asset in an exchange account. The exchange matches trades and processes deposits and withdrawals, making it a central access point for digital-asset activity.

Binance plays that marketplace role at enormous scale. The article identifies it as the world’s largest crypto exchange by daily trading volume. In practice, users can use Binance to trade digital assets and keep them in exchange-controlled accounts while deciding whether to withdraw them. The article focuses on that withdrawal function after the hack.

The suspension showed the exchange’s control over access to those accounts. Even though the company said user funds remained safe, customers temporarily could not withdraw. Binance later restored access in phases, prioritizing demand and completing security checks before reopening each network and asset pair.

The reported loss was extraordinarily large. Binance said it had set aside more than $6.34 billion in company funds to cover losses from the hack. The article also describes the incident as thought to be the biggest-ever crypto heist. That scale matters because it turns a cyberattack into a major corporate financial event.

The key mechanism was Binance’s promise to absorb the financial impact rather than pass it to users. The company stated that user funds remained safe. Its reserve was therefore presented as protection against losses linked to the stolen funds, while the exchange continued working to restore withdrawals.

The article does not state the usual size of cryptocurrency thefts, so it cannot support a precise comparison with an average or typical hack. Established reporting has documented many smaller crypto thefts, but their size varies widely. The clearest source-based conclusion is that this incident was exceptionally large and described as the biggest ever.

The hack had two immediate consequences. News of the cyberattack caused most major cryptocurrency prices to fall sharply on Friday. At the same time, Binance suspended user withdrawals, leaving customers unable to move funds through the exchange while it responded to the incident.

The access problem was not described as a permanent loss of user funds. Binance said user funds remained safe and that the company would absorb the financial impact of the stolen funds. It then began reopening withdrawals, starting with the Bitcoin network during the first phase.

The recovery remained controlled rather than instant. Binance said it would restore each network and asset pair only after stability and security checks. It also planned to prioritize tokens according to user demand during the previous week. This approach was intended to reduce operational risk while giving users access again and supporting market confidence.

Binance used a phased reopening because restoring withdrawals after a major hack required caution. Each network and asset pair could involve separate technical and security conditions. Reopening everything simultaneously might make it harder to detect problems or contain another failure. The company therefore linked access to completed stability and security checks.

Its stated priority rule was based on user demand. Binance said it would use data from the previous week to decide which tokens to restore first. Bitcoin became the first network reopened in phase one. The company also announced a planned Sunday window of 0600 to 0900 GMT for beginning the first phase.

The plan balanced access with risk control. Users could begin withdrawing through selected networks, while other assets remained unavailable until checks finished. Binance said this careful sequence would let it monitor stability and security as access expanded. The article does not provide a timetable for every remaining network.

A cryptocurrency exchange is a service layered on top of public blockchain networks. When users hold assets through an exchange, the exchange usually controls the wallet addresses and private keys used for withdrawals. It can therefore pause its own transaction requests, even if the underlying blockchain continues confirming transactions for everyone else.

For example, Bitcoin’s network can keep processing valid transactions while Binance disables its Bitcoin withdrawal button or holds requests for review. The blockchain does not need to stop because the pause occurs at Binance’s systems, accounts, or security procedures. Binance’s announcement that Bitcoin was the first network reopened illustrates this separation.

This arrangement gives exchanges operational control over customer access. After the hack, Binance could suspend withdrawals, investigate, and perform stability and security checks before reconnecting each network and asset pair. The article confirms the suspension and staged reopening, but does not describe Binance’s exact wallet architecture or internal controls.

A cryptocurrency transaction records a transfer from one blockchain address to another. A wallet helps a user manage the address and the private key needed to authorize spending. The transaction is broadcast to the network, where participating computers check its digital signature, available balance, and compliance with the blockchain’s rules.

If the checks pass, the transaction can be added to the blockchain and becomes part of the shared record. The private key is the critical authorization secret: whoever controls it can generally approve transfers from its associated address. Wallets may be software, hardware, or exchange-managed accounts, but their security depends on protecting the signing credentials.

These features reduce unauthorized changes because invalid signatures and rule-breaking transactions are rejected. They do not make theft impossible. A stolen private key, compromised wallet, or breached exchange can allow an attacker to create valid-looking transfers. The article reports Binance’s hack, but does not explain which security layer was compromised.