Binance Resumes Withdrawals After Record $6 Billion Hack Attributed to North Korea's TraderTraitor

The Quick Take

• Binance, the world's largest crypto exchange, suffered a $6 billion hack and is now resuming withdrawals in stages.
• The exchange has reportedly recovered 95% of stolen assets, with Bitcoin, Ethereum, BNB, Solana, XRP, and Dogecoin withdrawals restarted.
• The FBI has attributed the hack to North Korea's TraderTraitor group — the largest crypto theft on record.

The $6 billion hack of Binance represents the largest cryptocurrency theft ever recorded, dwarfing previous high-profile incidents including the $620 million Ronin Network breach. South Korean media reports that the exchange executed the hack through a compromised engineer's laptop and a vulnerability in its trade approval system. The ten-blockchain scope of the theft — with approximately $6.36 billion moved within roughly 20 minutes — demonstrates the operational sophistication of the TraderTraitor group, which the FBI has now officially attributed to North Korea. The 95% asset recovery claim by Binance, if accurate, is remarkable given the scale and the decentralized nature of blockchain asset tracking.

The market implications are multifaceted. In the immediate term, Binance's decision to restart withdrawals for major cryptocurrencies signals it has stabilized operationally, which removes the exchange-failure tail risk that was suppressing crypto prices in the days following the incident. However, the withdrawal spike Binance is seeing as it comes back online reflects lingering user distrust — investors are moving assets off centralized exchanges to self-custody or decentralized alternatives. This could accelerate the structural shift from CEX to DEX volume that has been building since the FTX collapse. For Bitcoin, Ethereum, and the major altcoins named in the resumption list, the clearing of the exchange-failure overhang is modestly bullish.

The macro variable that determines the longer-term market impact is the regulatory response. The FBI's attribution of the hack to North Korea will likely trigger renewed calls in the US and G7 for sanctions on crypto mixers and blockchain bridges used to obfuscate stolen asset flows. The IRS Criminal Investigation division's involvement signals criminal prosecution pathways. For the crypto industry, the near-term concern is whether the Binance resumption triggers a wave of similar attempts on other exchanges — the proof-of-concept that $6 billion can be moved in 20 minutes is now public. Watch Coinbase, OKX, and Kraken security disclosures in the coming weeks for any reactionary security update announcements.

Synthesized from 2 sources.