\n<\/p>\n
Binance customers pulled $3.64 billion, or 2.1% of its assets, as the world\u2019s biggest cryptocurrency exchange resumed service after a security breach linked to North Korea saw $6.3 \u200bbillion stolen from the platform last week.<\/strong><\/p>\n The exchange moved to reassure crypto investors and said withdrawals were stabilising after an initial spike and deposit volumes had remained \u201csubstantial\u201d after, what \u200canalysts believe, may be the world\u2019s biggest financial robbery ever.<\/p>\n After hitting a six-week low on Friday, bitcoin prices recovered slightly through the weekend to trade above $78,000 on Monday. Ether hit a two-month low on Friday and also recovered a little to $2,287.<\/p>\n Binance, which allows users to buy, sell and trade digital assets, has 335 million registered users globally. It said on Sunday it had $171 billion in total assets under management as of October 28.<\/p>\n The Binance theft adds to a string \u200bof recent crypto thefts. Attackers stole $2.9 billion worth of cryptocurrency across nearly 150 incidents last year, according to researchers at TRM Labs.<\/p>\n Withdrawal levels are an early test of whether customers \u200bstill trust Binance with their money after the attack. The exchange said it had covered 95% of the assets stolen in the heist.<\/p>\n Stablecoin market capitalisations \u2060tend to fall when money is leaving cryptocurrencies and they have dropped since Friday. The combined capitalisation of the two largest stablecoins, USDT and USDC, has dropped by about $1.2 billion since Friday, according to \u200bCoinmarketcap.com.<\/p>\n Spot bitcoin ETFs shed $643 million on Friday, the largest daily outflow of October, and more than $1.3 billion in leveraged positions were liquidated, said Ari Redbord, global head of policy at US blockchain analysis firm \u200bTRM Labs.<\/p>\n \u201cI get why, for conservative institutional investors, this is unsettling,\u201d Redbord said.<\/p>\n \u201cA hack at a financial institution means stolen usernames and passwords. A hack at a crypto exchange is bank robbery at the speed of the internet, which creates an unstable risk profile for anyone responsible for other people\u2019s capital.\u201d<\/p>\n Binance said on Sunday it had covered $6 billion of stolen cryptocurrencies by using its money to buy replacement tokens. The remaining 5% of stolen tokens consist \u200bof less liquid assets and may take longer to source, it said.<\/p>\n Despite those measures, some users were weighing options to hedge risks.<\/p>\n Jay Koh, vice president at the Asia Web3 AI Association, said he had \u200bnot withdrawn any of his holdings from Binance, as most of his funds were held in a cold wallet, which was not impacted by the hack.<\/p>\n \u201cI would not necessarily withdraw everything from Binance \u2026 However, I do think \u200cit is \u2060prudent to review exposure, diversify custody arrangements and avoid keeping more assets on any single platform than necessary.\u201d<\/p>\n Binance, which was founded in China, said the rollout for withdrawals would be carried out in stages, prioritising user demand. The first phase covered 15 tokens including bitcoin, ether and those involving some USDC and USDT stablecoins and dogecoin.<\/p>\n \u201cWe are taking a phased approach by prioritizing tokens based on the past week data of user demand,\u201d Binance said in an earlier article posted on X. It added, \u201cRest assured that market conditions are stable.\u201d<\/p>\n Binance said the net outflows reflected what clients had withdrawn and deposited after the event.<\/p>\n Crypto analytics platform \u200bDefiLlama said on its dashboard, opens new tabthat outflows were higher, at $5.81 \u200bbillion, up from the $4.36 billion it showed \u2060earlier. Binance did not immediately respond to a request for comment on the updated figures.<\/p>\n \u201cThis figure does not contain the flows we have deposited to our own new hot wallet, so they are not accurate. Our last update on X is closest to accurate (outstanding the moves in both deposits and withdrawals \u200bsince it was posted),\u201d a spokesperson for Binance said of the initial DefiLlama data.<\/p>\n The FBI said on Saturday \u200bthat the North Korean state-sponsored \u2060unit known as TraderTraitor was responsible for the attack.<\/p>\n Pyongyang has for years denied using state-linked cyber units for espionage, financial theft and revenue generation. Its mission in Geneva and embassy in China did not respond to requests for comment.<\/p>\n Law enforcement observed members of the unit converting stolen assets into the cryptocurrency ether, the FBI said in a statement, adding that it expected \u201cfurther laundering\u201d of the assets through the use of related technology.<\/p>\n Analysts \u2060had also pointed \u200bto North Korea\u2019s involvement. The bulk of the theft unfolded in around 20 minutes beginning late on Thursday and bore similarities \u200bto previous large attacks blamed on North Korea, according to US blockchain analysis firms TRM Labs and Chainalysis. \u201cWe don\u2019t know if it\u2019s North Korea \u2014 but if it \u200bis, we\u2019ll talk to North Korea about it,\u201d Trump told reporters in comments posted by a White House account on X.<\/p>\n<\/div>\nPHASED WITHDRAWALS<\/strong><\/h2>\n
FBI TIES ATTACK TO NORTH KOREAN UNIT<\/strong><\/h2>\n
US President Donald Trump, however, later on Saturday said it remained unclear whether North Korea was involved.<\/p>\n