❯ Binance mobilizes about 100 responders after a $6.3 billion theft and restores some withdrawals

Coordinating the responseBinance assembled a global response after roughly $6.3 billion in cryptoassets was stolen. Bloomberg’s account described a war room growing to about 100 people and coordination with crypto companies and the FBI. The exchange must repair systems, replace assets and manage withdrawal demand simultaneously.

The FBI attributes the attackIn its October 31 notice, the FBI attributed the theft around October 29 to North Korean activity it calls TraderTraitor and urged service providers to block related asset flows. The agency previously blamed the group for the approximately $1.5 billion Bybit theft in 2025.

Replacement tokens and phased withdrawalsReuters reported on November 1 that Binance said it had bought replacement tokens covering about 95% of the stolen assets and restored some withdrawals, including bitcoin and ether. Less-liquid tokens made up the remainder. Binance reported $3.64 billion in net outflows as of 15:30 UTC and said withdrawals were stabilizing after an initial spike.

Several recovery processes run togetherReplacement funding came from its user-protection fund, part of its futures insurance fund and corporate resources. Replacing customer backing, recovering stolen tokens and reopening withdrawals proceed separately. Bearing the loss still leaves the exchange responsible for liquidity, reserve disclosure and explaining its operational recovery.

▮ SIGNALA large custodian’s recovery depends on asset backing and its ability to meet continuing withdrawal and information demands.