Binance Resumes Trading After $6.3B Heist, Withdrawing $4.6B in Net Outflow

Key points

• Binance allowed customers to resume transactions for Bitcoin, Ethereum, and other major cryptocurrencies on Sunday.
• Customers withdrew over $4.6 billion and deposited just over $1 billion, creating a net outflow of $3.64 billion.
• The withdrawn amount represents 2.1% of Binance's total $171 billion in assets.
• Binance stated it had covered approximately 95% of the impacted amount by early Sunday, ensuring major cryptocurrencies remained fully backed.
• The FBI confirmed the theft was carried out by North Korean cybercriminals known as 'TraderTraitor'.
• Approximately $3 billion of the stolen assets were frozen by major stablecoin issuers to prevent further movement.

Background

On October 29, 2026, Binance disclosed a breach involving $6.3 billion in digital assets, the largest theft in cryptocurrency history. The exchange initially suspended all deposits and withdrawals and froze roughly $3 billion in stablecoins. While Binance initially cited a compromised laptop, blockchain intelligence firms attributed the complex attack to North Korea's 'TraderTraitor' unit. The breach triggered a sharp decline in Bitcoin prices and a broader sell-off in technology stocks.

How outlets are covering it

CBS News and Fox Business agree on the core facts regarding the $6.3 billion theft and Binance's commitment to cover the losses. However, they differ in emphasis. CBS News focuses on the immediate market reaction, detailing the $4.6 billion in withdrawals and the resulting net outflow. Fox Business highlights the geopolitical and future risk aspects, noting President Trump's comments on investigating North Korea's involvement and expert Eric Schiffer's warning that the incident could signal a broader wave of AI-driven cyberattacks. Both outlets confirm the FBI's attribution of the attack to the 'TraderTraitor' group, which was also responsible for a $1.5 billion theft from Bybit in February 2025.

Why it matters

The incident highlights the systemic risks of centralized cryptocurrency custody and the potential for large-scale cyberattacks by state actors. The massive net outflow, despite Binance's assurances, indicates significant customer anxiety. The FBI's public confirmation of North Korean involvement and the freezing of $3 billion in assets demonstrate the growing coordination between federal agencies and private sector entities to combat digital asset theft. The event may also signal a new era of sophisticated, AI-assisted hacking in the financial sector.

What to watch

Binance aims to resume full operations once the security environment is verified. The FBI and its partners, including the Secret Service and IRS Criminal Investigation, are urging private-sector entities to block transactions linked to 'TraderTraitor' addresses to prevent laundering. President Trump's administration is continuing to gather information on the North Korean connection. Analysts warn that the incident could be the precursor to more frequent and sophisticated cyberattacks as AI capabilities grow.