Binance has begun allowing users to withdraw funds from its platform as the exchange recovers from a record-breaking $6.3 billion (approx. £4.7 billion) security breach. The company initiated a phased restoration of services following a suspension that was implemented immediately after the theft was discovered on Thursday. As it recovers from a record $6.3bn (£4.7bn) hack, the cryptocurrency exchange Binance has started to allow its customers to withdraw their funds from the platform. But on Sunday announced that it had began a phased reopening after 2pm Singapore time, binance initially froze withdrawals as it investigated the breach.
Operations resumed shortly after 2 p.m. Singapore time on Sunday. The initial phase focused on users holding ethereum, USDT, and USDC tokens on the ethereum blockchain, alongside select holdings on the BNB Smart Chain. Dealing in the Avalanche currency was also restored later that day.
Company data indicates that 90% of the stolen assets have been successfully replenished. Binance noted that the remaining 10% involves tokens with lower liquidity, which may require additional time to acquire. Co-chief executive Richard Teng confirmed that the firm is fully committed to covering these remaining losses, ensuring that no individual user will face the financial consequences of the intrusion. According to the remaining 10% of tokens were less liquid, meaning they may take longer to buy, the company, In a post on X on Saturday.
To facilitate this recovery, Binance utilized its $1 billion Secure Asset Fund for Users, alongside portions of its Futures Insurance Fund and corporate treasury. The total amount set aside for reimbursement reaches approximately $6.34 billion.
The FBI confirmed on Saturday that the breach was orchestrated by the North Korea-affiliated group TraderTraitor. This group is widely believed to be an extension of the Lazarus Group, a cybercriminal organization that gained international prominence in 2014 for its alleged involvement in the attack on Sony Pictures following the release of the film The Interview. Which gained notoriety in 2014 when it was accused of hacking into Sony Pictures as revenge for The Interview, a film that mocked the North Korean leader Kim Jong-un, traderTraitor is believed to be part of the Lazarus Group.
In an official statement, the FBI expressed that the Democratic People’s Republic of Korea was responsible for the theft on or about October 29. The bureau has urged the private sector to identify and block transactions linked to addresses used by TraderTraitor to launder stolen assets, noting that they have observed the group converting funds into ethereum for use in decentralized finance and instant swap platforms. According to “The Federal Bureau of Investigation is releasing information advising the Democratic People’s Republic of Korea (North Korea) was responsible for the theft of more than $6bn in virtual assets from cryptocurrency exchange Binance, on or about October 29,” the law enforcement agency, In a statement.
Regarding the technical nature of the intrusion, Richard Teng described it as a sophisticated, complex attack. Perpetrators reportedly used a compromised laptop combined with malicious software specifically designed to erase traces of their activity, complicating investigation efforts.
Market reaction to the incident was significant, with bitcoin values falling by nearly 5% and ethereum dropping by approximately 6%. Binance’s native token, BNB, experienced a sharper decline of nearly 10%.
This massive heist has intensified concerns regarding the potential for advanced artificial intelligence models to undermine current cryptographic and IT security standards. Furthermore, the incident highlights the ongoing efforts of North Korea to generate revenue through illicit channels despite facing extensive international sanctions related to its nuclear and missile development programs. The attack on Binance came as many observers express worries that the ever-expanding capabilities of artificial intelligence models could compromise cryptography and IT security protocols.
