Binance Reopens Withdrawals as FBI Pins $6B Hack on North Korea

What it is

Binance reopened withdrawals in phases on 1 November 2026, days after a hack of more than $6B. The page adds figures on what happened after the reopening and on how Binance says it covered the loss.

What the page adds

In the first nine hours, Binance processed $4.65B in withdrawals against $1.01B in deposits, a net outflow of about $3.64B. Binance puts that at 2.1% of its $171B in assets and says volumes were "stabilising as expected."

Only the first 15 networks and assets are live. The next phase is set for Tuesday.

Binance says it has covered about 95% of the stolen amount, with the remainder in less liquid tokens. Its new proof of reserves covers 10 tokens, including BTC, ETH and USDT. The page describes it as a cryptographic check that users can run to confirm their balances are backed at least 1:1.

What to do

The page gives no commands or tooling. Its one request to defenders is the FBI's: block the 628 listed addresses, which the FBI tied to North Korea's TraderTraitor group on 31 October 2026. The FBI asked THORChain node operators, instant exchanges and DeFi services to do so. Chainalysis says $500M has moved out of TRON wallets and funds are starting to shift to Solana, so screening on Solana is relevant as well as on TRON.

Caveats

The page does not link the address list, explain how the hack was carried out, or say how to run the proof-of-reserves check. The 95% coverage and "stabilising as expected" claims are Binance's own statements, not independently verified.