Binance, the world’s largest cryptocurrency exchange, has announced plans to resume withdrawals in phases after addressing the bulk of the digital assets stolen in a major cyberattack.
The exchange said the first phase would begin between 0600 and 0900 GMT on Sunday. Withdrawals would include major cryptocurrencies such as Bitcoin, Ether, BNB, Solana, XRP and Dogecoin, alongside other tokens.
In a statement posted on X late Saturday, Binance said the remaining 5% of the stolen tokens comprised less liquid assets that could take longer to obtain in the quantities required.
Withdrawals Resume in Phases
The phased restoration is intended to allow users to regain access to withdrawals following the incident.
Binance said it had recovered or covered 95% of the stolen assets, although the remaining portion involved tokens that were harder to source.
The exchange did not indicate in the supplied statement when withdrawals involving all remaining assets would be fully restored.
FBI Links Attack to North Korea
The Federal Bureau of Investigation (FBI) said on Saturday that the attack was carried out by TraderTraitor, a cyber unit sponsored by the North Korean state.
The agency has linked the group to cryptocurrency thefts and other cyber operations. North Korea has repeatedly denied allegations that it uses state-linked cyber units for espionage, financial theft or revenue generation.
North Korea’s mission in Geneva and its embassy in China did not respond to requests for comment, according to the report.
Clarity Act crypto bill: Key facts, goals and what happens next
Stolen Funds Converted to Ethereum
The FBI said law enforcement officials had observed members of the group converting stolen assets into Ethereum.
The agency also warned that further laundering of the funds was expected, potentially through related technologies and services designed to obscure the movement of cryptocurrency.
The conversion of stolen tokens into other digital assets can complicate efforts to trace and recover funds, particularly when transactions move across multiple wallets and platforms.
Update: We have already covered $6B of the impacted amount of the hacked loss.
— Binance (@binance) November 1, 2026
Investigation Continues
The incident has drawn attention to the security risks facing cryptocurrency exchanges and the challenges involved in recovering stolen digital assets.
According to the report, the FBI and US Secret Service have been working with Binance following the $6.3 billion hack.
Although Binance says it has addressed most of the stolen amount, the remaining less liquid tokens present an additional challenge. The phased withdrawal process will be closely watched by users awaiting access to their funds as the investigation continues.
