Binance resumes phased withdrawals after FBI ties $6B hack to North Korea
Binance has restored withdrawals for additional assets as it progressively brings services back after the October 29, 2026 theft of more than $6 billion in virtual assets, which the FBI attributed to North Korea (DPRK) under the campaign name "TraderTraitor." The latest update reopens withdrawals on the Ethereum Network for USDC, USDT and ETH and on BNB Smart Chain for USDC, USDT and BNB, with more networks and assets to follow in phases.
- Phase-one withdrawals initially resumed 2026-11-01 between 06:00–09:00 UTC on the BTC network; ETH and BSC followed in the new update
- Binance updated its Proof of Reserves address list to newly generated wallets; all withdrawals are processed from these new addresses
- Impacted-amount coverage has risen to ~95%; the SAFU transfer (7,499 BTC) completed, with no evidence of wallet private key compromise
- The FBI said the actors are converting stolen assets primarily into ETH and urged DeFi services and exchanges to block laundering addresses
- Binance Alpha trading remains suspended; a full post-incident report is promised once the investigation concludes
Sources
- Withdrawal Update Withdrawals have now been restored for the following assets and networks: - Ethereum Network: USDC, USDT, ETH - BNB Smart Chain (BSC): USDC, USDT, BNB We will continue to restore additional assets and networks in phases following the completion of our https://t.co/f2JeNYlJeJx.com ↗
- As part of our ongoing security response, we have updated our list of Proof of Reserves addresses to include newly generated wallet addresses. Going forward, all withdrawals will be processed from these new wallet addresses. https://t.co/nspWeaiQDz https://t.co/jSeeorSKGDx.com ↗
- As part of our ongoing security response, we have updated our list of Proof of Reserves addresses to include newly generated wallet addresses. Going forward, all withdrawals will be processed from these new wallet addresses. https://t.co/xJ44zgJh9Q https://t.co/jSeeorSKGDx.com ↗
- Update: As part of our ongoing security response, we have updated our list of Proof of Reserves addresses to include newly generated wallet addresses. Going forward, all withdrawals will be processed from these new wallet addresses. https://t.co/jSeeorSKGDx.com ↗
- Update: First batch network now opened in phase one of withdrawals is $BTC bitcoin network https://t.co/jSeeorSKGD
