Binance customers withdrew $3.64bn in assets on Sunday as the world's largest cryptocurrency exchange reopened following a record hack that affected $6.3bn worth of digital assets last week.
The withdrawals between 06:00 and 15:30 GMT on November 1 represented a net outflow of approximately 2% of Binance's $171bn in assets under management. The exchange said an initial spike in withdrawals later declined and "are stabilising as expected."
The FBI and other major organisations have accused North Korea of responsibility for the attack. The cybercrime group TraderTraitor, also known as the Lazarus Group, is attributed with the hack. Binance said early checks suggest the incident may have started with a compromised laptop belonging to an engineer.
Binance suspended all transactions after the hack and has since reopened for withdrawals of more than two dozen major cryptocurrencies including Bitcoin and Ethereum. The firm said it has covered around 95% of the stolen assets and reserved more than $6.34bn in funds to address the fallout. "Our commitment remains the same: Binance will fully cover the financial impact of the funds stolen in this incident," the company said.
Binance said it replaced customers' assets using its corporate treasury, futures insurance and emergency reserve funds. Additional services will resume in phases once security checks are completed. The exchange's US-facing platform was not affected by the incident.