Binance said on Sunday that it has reversed the layoffs for several major cryptocurrencies such as Bitcoin and Ethereum after more than $6 billion in assets were stolen from the cryptocurrency exchange.
Binance is the world’s largest crypto exchange by daily trading volume. The news of the hacking attack, which is thought to be the biggest ever Crypto Heist, the prices of most major cryptocurrencies fell sharply on Friday.
However, the company offered assurances that it would cover 90% of the losses from the attack, using company funds to buy tokens to replenish a large portion of what was stolen.
Binance suspended user withdrawals after the attack but said they would be reinstated in phases, the first of which began on Sunday.
“First batch network now open in phase 1 of withdrawals,” the exchange posted on X.
As of 5 a.m. Eastern Time, Binance said it had restored withdrawals for Bitcoin, Ethereum, BNB, XRP, Base, Doge and Optimism, and that it “will continue to restore assets and networks in phases as security checks are completed.”
The FBI accused North Korea of being behind the hack in a statement on Saturday, confirming earlier suspicions by private investigators and analysts that a Pyongyang-linked group called TraderTraitor was responsible.
TraderTraitor is the same group accused of a $1.5 billion theft of the Bybit platform in February last year.
“The Federal Bureau of Investigation (FBI) released information advising the Democratic People’s Republic of Korea (North Korea) was responsible for the theft of more than $6 billion USD in virtual assets from the cryptocurrency exchange Binance on or about October 29, 2026.
The FBI added that it has observed “TraderTraitor actors” converting stolen assets into Ethereum, and expects those assets to be further laundered by using decentralized finance and instant swap services.
It said it is urging private sector entities to “block transactions with or derived from addresses TraderTraitor actors use to launder these stolen assets.”