Sourced fact
The News
On Sunday, the giant digital exchange platform "Binance" officially announced the reopening of its services amidst a massive wave of user withdrawals of their digital assets estimated at around $3.6 billion (£2.7 billion). This huge withdrawal followed what is believed to be the largest cyber breach in the history of digital currencies, where the company halted all transactions immediately after discovering the incident that affected digital assets worth $6.3 billion.
According to "Binance" via its site on X (formerly Twitter), approximately $4.649 billion was processed in withdrawals and $1.01 billion in deposits between 06:00 and 15:30 Greenwich Mean Time on November 1, resulting in a net outflow of $3.64 billion. The company confirmed that this net amount represents only more than 2% of the total assets worth $171 billion managed by the platform, noting that withdrawal operations began with a sharp rise then decreased to stabilize as expected.
The United States Federal Bureau of Investigation (FBI) also stated that the "Trader Treason" group, also known as the "Lazarus Group" from North Korea, is responsible for the cyber attack—the same team that stole $1.5 billion from the "Bitt" platform in 2025. The agency published a list of cryptocurrency wallet addresses linked to this group and called on industry companies to ban any transactions involving these addresses to prevent continued money laundering.
Although the company replaced customer assets using a mix of its own sources, including its treasury fund and futures insurance funds, it confirmed its commitment to covering the full financial impact of losses resulting from the incident. However, a portion of the stolen funds remains actively laundered through thousands of addresses, as explained by Alex Zeprek on the "Today" radio program.
Analysis & context
Analysis & Context
From an analytical perspective, this event represents a critical turning point in the world of centralized digital currencies, revealing the fragility of the technical infrastructure of these platforms against organized cyber attacks. The ability of the Lazarus Group to breach the world's largest trading platform and divert it to huge sums reflects an evolution in hacking methods that go beyond mere data theft to directly targeting financial assets.
In the broader context, cybersecurity reports indicate that attacks from North Korea have become more professional and complex, as these groups use advanced technologies to mitigate the effects of international sanctions and continue their cross-border criminal operations. Additionally, the use of laptops owned by employees as an entry point for the attack highlights the importance of internal security within major technology institutions.
The role of organizations such as "Chainalysis" and the United States Federal Bureau is highlighted in cooperating with governments and private companies to track stolen funds, indicating a global trend towards strengthening international cooperation in combating cross-border cyber crimes. However, the continued laundering of money through thousands of addresses illustrates the difficulty of fully recovering assets at present.
Finally, Binance's decision to cover full losses despite their huge size reflects a strategy to maintain trust in the digital currency ecosystem, which is vital for the continued growth of this sector that relies entirely on user trust.
