Withdrawals Resume After Record $6.3 Billion Platform Hack

Customer withdrawal capabilities have officially been restored at a major cryptocurrency exchange after normal operations were abruptly paused due to a historic security breach. The global trading platform suffered a severe exploit, resulting in the theft of a record $6.3 billion in digital assets, a massive financial sum that translates to approximately £4.7 billion. Following the initial discovery of the immense loss, the platform temporarily suspended all outgoing customer transactions to assess the extensive damage and secure the remaining operational infrastructure.

The unprecedented cyberattack was executed with alarming speed and precision. According to available incident data, the entire drain of the platform's digital assets unfolded over a span of roughly 20 minutes. During this remarkably brief operational window, malicious actors managed to siphon a wide variety of cryptocurrencies across several different blockchain networks. The compromised digital assets included prominent tokens such as Bitcoin, Ethereum, Solana, Avalanche, and Dogecoin. Additionally, the attackers successfully extracted fiat-pegged digital assets, targeting specifically the stablecoins USDT and USDC.

Asset Movements and Attribution

Following the initial 20-minute extraction, onchain data revealed specific movements of the stolen funds. In one notable instance of post-theft activity, the attackers transferred exactly 233.46 million stolen XRP tokens out of the primary pool of compromised assets. This particular batch of XRP was systematically relocated into six entirely new wallet addresses. Tracking these initial wallet movements remains a critical step for entities attempting to monitor the illicit flow of the purloined digital assets across the broader decentralized economy.

Federal authorities have already weighed in on the core identity of the perpetrators behind the massive platform exploit. The FBI has officially attributed the sophisticated cyberattack to the Lazarus Group, alongside a related cyber warfare unit known as TraderTraitor. Both of these entities operate directly as state-sponsored hacking syndicates heavily affiliated with North Korea. The involvement of these heavily resourced, state-aligned groups highlights the continuing operational threat they pose to centralized trading platforms and blockchain infrastructure globally.

Freezing Funds and Restitution

Despite the immense financial scale of the $6.3 billion security breach, a significant portion of the drained capital has already been contained. With the direct cooperation of various industry partners and multiple stablecoin companies, about $3 billion of the affected digital assets were successfully frozen. By rapidly intercepting these funds at the contract level, the assisting organizations have prevented the North Korean state-sponsored hackers from cashing out or further laundering nearly half of the originally stolen digital capital.

To address the remaining financial deficit and ensure that everyday retail users are not left bearing the cost of the cyberattack, Binance has taken decisive internal financial measures. The exchange officially set aside approximately $6.34 billion specifically allocated to cover the overall losses resulting from the incident. This immense capital reserve effectively matches the total value of the stolen cryptocurrency, allowing the platform to fully back its remaining customer accounts as standard withdrawal services finally resume for the public.