Cryptocurrency exchange Binance has initiated a phased restoration of customer withdrawal services following a massive cybersecurity breach that led to the theft of digital assets valued at approximately Rs 59,900 crore. The initial reopening began on November 1 across a three-hour window starting at 06:00 GMT, offering access to selected cryptocurrencies and blockchain networks determined by customer demand patterns recorded over the preceding week. The exchange adopted a graduated rollout to prevent transaction bottlenecks and ensure platform stability as infrastructure checks proceed. Binance affirmed that user balances remain secure, pledging that the platform will absorb the entirety of the financial loss, with nearly 95 percent of the stolen assets already replenished from its own balance sheet.
Phased Withdrawals Underway as Core Balances Reach Full Reserve Backing
The platform temporarily froze withdrawal channels immediately after detecting the breach to contain unauthorized movements, isolate compromised systems, and conduct technical audits across its payment pipelines. Operations are being normalized incrementally as security teams confirm the integrity of wallet mechanisms. According to corporate disclosures, major digital assets including Bitcoin, Ethereum, Tether, BNB, Solana, USD Coin, XRP, USD1, RLUSD, and Zcash have achieved 100 percent reserve backing, which clients can independently monitor through the company’s public verification platform. The outstanding five percent involves less liquid non-core tokens that require active procurement through open spot markets and bilateral over-the-counter channels to restore full inventory.
US Investigators Link High-Profile Heist to Foreign Cyber Unit
The unprecedented scale of the theft has triggered an international law enforcement response, with the United States Federal Bureau of Investigation formally attributing the operation to the North Korean state-sponsored cyber outfit TraderTraitor. Investigative findings released by the FBI revealed that the threat actors converted significant volumes of the stolen digital holdings into Ethereum, with subsequent tracking indicating attempts to funnel the funds through specialized laundering platforms. While North Korean authorities have historically denied responsibility for state-backed cyber heists and foreign financial espionage, the operation highlights long-standing systemic vulnerabilities associated with internet-connected hot wallets that major exchanges rely upon to settle daily client transactions.
Forensic Teams Investigate System Entry Points and Endpoint Infiltration
Preliminary technical reviews suggest the attackers infiltrated withdrawal-processing systems to execute illicit transfers directly from transaction wallets. While early evidence pointed to an initial compromise of an engineering staff member’s laptop, forensic examiners later uncovered multiple secondary entry avenues across the corporate network, pointing to a broader attack vector. The hackers also deployed malicious wiping tools designed to eliminate operational telemetry and mask their command footprints. Binance affirmed that its private keys remained secure throughout the incident. The firm is currently coordinating with blockchain tracking specialists and global law enforcement to intercept the transferred assets, with a comprehensive post-incident technical assessment scheduled for release following the conclusion of forensic reviews.
