Binance Users Withdraw $3.6 Billion After Record Crypto Hack

What Happened

Binance, the world's largest cryptocurrency exchange, was hit by a record hack, resulting in the theft of $6.3 billion worth of digital assets. The hack, which is believed to be the largest in history, led to the suspension of all transactions on the platform. On Sunday, Binance reopened and customers withdrew $3.6 billion in assets, with the company processing $4.649 billion in withdrawals and $1.01 billion in deposits between 06:00 and 15:30 GMT on November 1.

The hack is attributed to TraderTraitor, a North Korean cybercrime group also known as the Lazarus Group, which stole a then-record $1.5 billion from crypto exchange Bybit in 2025. The FBI has published a list of cryptocurrency wallet addresses linked to the group and urged partners in the industry to help by blocking transactions involving them.

What the Evidence Establishes

The evidence suggests that the hack started with a compromised laptop belonging to an engineer, allowing hackers to make unauthorized transactions. Binance has reserved more than $6.34 billion in funds to deal with the fallout of the attack and has covered around 95% of the stolen assets. The company has committed to fully covering the financial impact of the funds stolen in the incident.

The attack hit Binance's global centralized exchange, Binance.com, while its US-facing platform was not affected. The company has resumed withdrawals of more than two dozen major cryptocurrencies like Bitcoin and Ethereum and will resume more services in phases once security checks are completed.

Where the Accounts Conflict

There are no significant conflicts in the accounts of the hack, with both Binance and the FBI attributing the attack to the Lazarus Group. However, the exact details of the hack and the extent of the damage are still being investigated. Binance has said that early checks suggest the incident may have started with a compromised laptop, but the company has not provided further details on the matter.

The FBI has published a list of cryptocurrency wallet addresses linked to the Lazarus Group, but it is unclear how the agency obtained this information. The group's involvement in the hack is based on the FBI's investigation, but the exact nature of the evidence is not publicly known.

Context and Stakes

The hack has significant implications for the cryptocurrency market, with Binance being one of the largest exchanges in the world. The theft of $6.3 billion worth of digital assets is a major blow to the company and its customers, and the incident has raised concerns about the security of cryptocurrency exchanges.

The Lazarus Group's involvement in the hack is also significant, as the group has been linked to several high-profile cyberattacks in the past. The group's activities have been attributed to North Korea, which has been accused of using cyberattacks to raise funds for its nuclear program.

The hack has also raised questions about the regulation of cryptocurrency exchanges and the need for stronger security measures to protect customers' assets. The incident has sparked calls for greater transparency and accountability in the cryptocurrency industry, and it remains to be seen how the industry will respond to the hack.

What to Watch Next

Binance's ability to cover the stolen assets and restore customer confidence will be closely watched in the coming days. The company's commitment to fully covering the financial impact of the funds stolen in the incident will be tested, and any further security breaches could have significant consequences for the company and the wider cryptocurrency market.

The FBI's investigation into the hack and the Lazarus Group's involvement will also be closely monitored. The agency's efforts to block transactions involving the group's cryptocurrency wallet addresses will be crucial in preventing further attacks, and any developments in the investigation could have significant implications for the cryptocurrency industry.

The regulatory response to the hack will also be important, with calls for greater oversight and regulation of cryptocurrency exchanges likely to grow in the coming days. The incident has highlighted the need for stronger security measures and greater transparency in the industry, and it remains to be seen how regulators will respond to the hack.

Bottom Line

The hack of Binance is a significant incident that has raised concerns about the security of cryptocurrency exchanges and the need for stronger regulation. The company's commitment to fully covering the financial impact of the funds stolen in the incident is a positive step, but the incident has highlighted the need for greater transparency and accountability in the industry.

The Lazarus Group's involvement in the hack is a significant concern, and the group's activities have been linked to several high-profile cyberattacks in the past. The incident has sparked calls for greater oversight and regulation of cryptocurrency exchanges, and it remains to be seen how the industry will respond to the hack.

The incident has also highlighted the need for stronger security measures to protect customers' assets, and it is likely that the incident will lead to significant changes in the way that cryptocurrency exchanges operate. The hack is a wake-up call for the industry, and it is crucial that companies take steps to improve their security and protect their customers' assets.