Binance has experienced a $3.6 billion net outflow of cryptoassets after reinstating customer withdrawals on Sunday. While this represents a significant exodus, it is a relatively soft blow to the exchange’s overall operations in the wake of the largest cyber theft in history.
The world’s biggest cryptocurrency exchange froze withdrawals immediately after Thursday’s $6.3 billion hack to investigate and stabilize the situation, pledging to fully reimburse all affected customers. Details shared on social media indicated that the flight of funds began to ease after an initial spike.
Although Binance managed the crisis relatively quickly with the help of industry partners and the U. S. government, the digital heist has reignited debates over cryptocurrency vulnerabilities. The attack, reportedly caused by an employee’s compromised laptop, rattled confidence in existing cybersecurity protocols and sent shockwaves across the sector. U. S. government entities, including the FBI and the Secret Service, are actively investigating the breach, with blockchain-analytics firms pointing the finger at North Korea.
Despite the severity of the hack, the market fallout appears contained. On Sunday, the value of most major cryptocurrencies fluctuated by less than 1%. Bitcoin, which commands about 60% of the sector’s market value, traded around $78,000—roughly 5% below its pre-theft levels.
«On some level, this shows how much the industry has matured,» noted Haseeb Qureshi, managing partner at venture fund Dragonfly. «We saw extraordinarily quick responses.»
Many experts praised Binance’s crisis management, highlighting its rapid reaction, transparent public updates, and decision to use corporate profits for reimbursements. Binance has already replaced about 95% of the stolen cryptocurrency using its corporate treasury, emergency, and insurance funds.
«Our commitment remains unchanged: Binance will bear the financial impact of the stolen funds,» the company stated. «These losses will not be passed on to users.»
The withdrawal process has been rolled out gradually. The first phase included 15 tokens—such as Ether and major stablecoins like Tether’s USDT and Circle’s USDC—across 15 blockchain networks, including Ethereum, BNB Smart Chain, XRP, and Base. Co-Chief Executive Officer Yi He clarified on X that not all movements were customer withdrawals, as some were internal transfers between Binance wallets.
Given Binance’s sheer scale, completely abandoning the platform is difficult for many. As of October 28, the exchange held $171 billion in assets under management, dwarfing its closest rival, OKX, which holds about $29 billion.
«We won’t pull money off,» said Vincent Liu, chief investment officer at Kronos Research. «Binance is the platform with most liquidity. If you want to trade or hedge in crypto, you will have to be on Binance. I do expect withdrawals but I also see many will come back as liquidity recovers.»
Quantitative firm SQS Trading, which had about a quarter of its trading capital on Binance, plans to reduce that exposure by roughly a third. However, founder Eli Williams emphasized that this won’t flatten their positions or reduce their hedging activity on the exchange.
«It’s hard to forecast what the net impact will be at this point,» Williams said, «but we will be monitoring capital outflows and volume impact relative to other major venues.»
Meanwhile, others are choosing to stay put. Justin d’Anethan, head of research at private markets advisory firm Arctic Digital, remains unfazed by the breach.
«When something seems fishy, it’s good to act fast, but when something catastrophic happens, it’s better to hold off doing anything,» he said. «I haven’t and wouldn’t move away from Binance.»
The hack also highlights a darker trend: a spate of attacks this year suggests that artificial intelligence is making hackers more lethal. Security experts believe North Korean operatives have integrated AI tools into their arsenal, particularly for reconnaissance and social engineering.
These breaches have exposed severe security flaws just as the industry pushes deeper into mainstream finance. Recent incidents include hundreds of millions drained from Bitget in September, over $100 million in Bitcoin stolen from Coinkite Inc. wallets, and millions lost due to Ledger device tampering. Other targets have included the prediction market Polymarket, South Korean firms Mirae Asset Global Investments and Daishin Securities, and Japan’s GMO Internet Group Inc.
