Skip to main content

full timeline

Binance cyberattack fallout

LiveFactlen Newsroom· Updated

Follow Binance cyberattack fallout in the Factlen app and get an alert when there is news. Get the app

The FBI has formally attributed the $6.3 billion Binance breach to North Korean hackers.From: FBI Attributes $6.3 Billion Binance Cyberattack to North Korean Hackers

Share this story

Latest

On November 2, the FBI formally attributed the cyberattack to the North Korean state-sponsored hacking collective known as TraderTraitor, or the Lazarus Group.

By 06:54 UTC on November 2, data showed the platform had processed $4.65 billion in withdrawals against $1.01 billion in deposits during the first nine and a half hours of reopened operations. This resulted in a net outflow of $3.64 billion, representing about 2.1 percent of the company's total assets under management.

Binance announced that its withdrawal volumes have started to stabilize following the initial spike. The exchange confirmed it has successfully recovered or replaced 95 percent of the stolen cryptocurrencies and has resumed normal operations, though it continues to face regulatory scrutiny.

How the story developed

A cyberattack forced the cryptocurrency exchange Binance to freeze operations, resulting in the largest cryptocurrency theft in history with $6.3 billion stolen.

In response to the breach, the company initiated a phased restoration of its services. Binance worked alongside law enforcement agencies, utilizing blockchain forensics to track and intercept the illicit digital transfers.

Binance and law enforcement successfully recovered $6 billion of the stolen assets.From: FBI Attributes $6.3 Billion Binance Cyberattack to North Korean Hackers ·

Through these efforts, authorities successfully froze a portion of the assets. To address the remaining shortfall, the exchange utilized its internal funds and its secure asset fund.

On November 1, Binance reopened customer withdrawals. The resumption of services led to an immediate surge in user activity, with initial withdrawals exceeding $4 billion as customers moved their funds off the platform.

Illustration: Forensic analysts used the public ledger to track and freeze the stolen assets before they could be laundered.From: FBI Attributes $6.3 Billion Binance Cyberattack to North Korean Hackers ·

Where things stand

  1. Binance Records $3.64 Billion in Net Outflows After Reopening Withdrawals

    Key point: Binance saw $3.64 billion in net outflows shortly after resuming withdrawals, though the exchange noted the volume is stabilizing and represents a small fraction of its total assets.

    Cryptocurrency exchange Binance recorded approximately $3.64 billion in net outflows within the first nine and a half hours of reopening customer withdrawals on November 1. The platform processed $4.65 billion in withdrawals against $1.01 billion in deposits during this period, representing about 2.1% of its total assets under management.

    The surge in withdrawals follows a phased restoration of services after a record $6.3 billion cyberattack forced the exchange to freeze operations. Binance reported that withdrawal volumes began to stabilize following the initial spike, and the company has stated it replaced 95% of the stolen assets using internal funds and its secure asset fund.

Charts, maps and images

Illustration: Cryptocurrency markets stabilized quickly after Binance confirmed its core cold storage wallets were secure.From: FBI Attributes $6.3 Billion Binance Cyberattack to North Korean Hackers ·

November 2026

  1. Cryptocurrency exchange Binance faces significant customer outflows and regulatory scrutiny following a massive cyberattack attributed to state-sponsored actors.
    1. Binance Records $3.64 Billion in Net Outflows After Reopening WithdrawalsKey point: Binance saw $3.64 billion in net outflows shortly after resuming withdrawals, though the exchange noted the volume is stabilizing and represents a small fraction of its total assets.