Binance to Resume Withdrawals After Recovering Bulk of $6 Billion in Stolen Funds
Binance, the world’s largest cryptocurrency exchange, has announced that it will begin resuming customer withdrawals in phases starting Sunday. The move comes after the company says it has recovered roughly 95% of the $6.3 billion that was stolen in a massive digital heist. For many users who have been locked out of their funds, the news marks the first sign of relief after weeks of uncertainty.
The exchange had paused withdrawals following the breach, a step it described as necessary to protect remaining customer assets and to give investigators time to trace the stolen money. With most of the funds now back under control, Binance says it can safely begin reopening the withdrawal system, though it will do so carefully rather than all at once.
What Happened in the Heist
The theft is one of the largest cyber heists ever recorded in the cryptocurrency industry. According to the FBI, the attack was carried out by a North Korean state-sponsored hacking unit. Such groups have been linked to a long string of crypto thefts in recent years, often using the stolen funds to support government programs.
North Korean hacking teams have become a major concern for exchanges and law enforcement worldwide. Their methods often include social engineering, malware and attacks on private keys. Because crypto transactions can move across borders in minutes, stolen coins are frequently split, swapped and routed through many wallets to hide their origin. This makes recovery difficult, but not always impossible.
Why 95% Recovery Matters
Recovering about 95% of stolen funds is an unusually strong outcome. In most large crypto thefts, only a small share is ever returned. The recovery suggests that investigators and Binance’s security team were able to track and freeze a large portion of the assets before they were fully laundered.
The remaining 5% is harder to recover. Binance said the leftover stolen assets are less liquid, meaning they are harder to sell or convert quickly without drawing attention. These may include obscure tokens or coins with thin trading markets. Tracing and recovering such assets can take much longer, and some may never be fully returned.
Which Coins Can Be Withdrawn
The phased reopening will cover several popular cryptocurrencies, including bitcoin, ether and dogecoin. These are among the most widely held assets on the platform, so their return to normal withdrawal service will matter to a large number of users. Binance has not said exactly how the phases will be scheduled, but the process is expected to expand over the coming days as systems are tested and verified.
Phased withdrawals are common after a major security incident. They let an exchange manage heavy demand, check that security upgrades work properly, and avoid a sudden rush that could strain the platform. Users should expect possible delays and should follow official Binance announcements for timing details.
What This Means for Investors
For crypto investors, the episode carries two lessons. First, exchange risk is real. Holding large amounts on a centralized platform means trusting that platform’s security. Second, recovery is possible when exchanges act quickly and work with authorities.
The broader market will now watch whether the phased withdrawals run smoothly. A calm, orderly reopening could help rebuild confidence in Binance and in the wider crypto sector. A chaotic process, by contrast, could renew doubts. For now, the recovery of most of the stolen funds is a rare piece of good news in a story that began as one of the industry’s worst security failures.
