Binance sees outflows stabilising as exchange returns online after $6.3 billion heist - WHBL News

The exchange moved to reassure crypto investors and said withdrawals were stabilising after an initial spike and deposit volumes had remained 'substantial'.

It said it had now covered 95% of the assets stolen in the heist.

The theft, which analysts say could be the biggest financial robbery ever, adds to a string of recent crypto thefts.

Attackers stole $2.9 billion worth of cryptocurrency across nearly 150 incidents last year, according to researchers at TRM Labs.

Withdrawal levels are an early test of whether customers still trust Binance with their money after the attack.

Stablecoin market capitalisations tend to fall when money is leaving cryptocurrencies and they have dropped since Friday.

The combined capitalisation of the two largest stablecoins, USDT and USDC, has dropped by about $1.2 billion since Friday.

Phased withdrawals

Binance, which was founded in China, said the rollout for withdrawals would be carried out in stages, prioritising user demand.

The first phase covered 15 tokens including bitcoin, ether and those involving some USDC and USDT stablecoins and dogecoin.

Binance said earlier on Sunday it had covered $6 billion of stolen cryptocurrencies by using company money to buy replacement tokens.

The remaining 5% of stolen tokens consist of less liquid assets and may take longer to source in the required amounts.

Binance said the net outflows reflected what clients had withdrawn and deposited after the event.

Crypto analytics platform DefiLlama said on its dashboard that outflows were higher, at $5.81 billion, up from the $4.36 billion it showed earlier.

Binance did not immediately respond to a request for comment on the updated figures.

This figure does not contain the flows we have deposited to our own new hot wallet, so they are not accurate. Our last update on X is closest to accurate (outstanding the moves in both deposits and withdrawals since it was posted),

North Korean ties

The FBI said on Saturday that the North Korean state-sponsored unit known as TraderTraitor was responsible for the attack.

Pyongyang has for years denied using state-linked cyber units for espionage, financial theft and revenue generation.

Law enforcement observed members of the unit converting stolen assets into the cryptocurrency ether, the FBI said in a statement.

It added that it expected 'further laundering' of the assets through the use of related technology.

Analysts had also pointed to North Korea’s involvement.

The bulk of the theft unfolded in around 20 minutes beginning late on Thursday and bore similarities to previous large attacks blamed on North Korea.

US President Donald Trump, however, later on Saturday said it remained unclear whether North Korea was involved.

Binance to bear costs

Binance said it will bear the financial impact of the hack and has set aside around $6.34 billion of company funds to cover the losses.

The money spent buying replacement tokens came from Binance’s $1 billion Secure Asset Fund for Users (SAFU), a bitcoin reserve it holds to protect customers in the event of security breaches.

It also used some of its Futures Insurance Fund and its corporate treasury.

Co-CEO Yi He said on the weekend Binance would use 50% of its SAFU funds, while the company committed to replenishing the fund to about $1 billion.

She warned Binance had been made aware of new scams that had emerged during the past few days 'amid the chaos'.