Binance plans to resume withdrawals in phases after covering 95 per cent of the $6.3 billion in tokens stolen in what has been described as the world’s largest digital heist. The exchange said the first phase is scheduled between 6am and 9am GMT on Sunday, covering Bitcoin, ether, BNB, Solana, XRP, dogecoin and other digital assets.

The National reported that Binance announced the schedule in a post on X late Saturday. The exchange said the remaining 5 per cent consisted of less liquid assets that may take longer to source in the required amounts. Binance said it would absorb the financial impact rather than pass the losses to customers.

Resume Withdrawals After Readiness Checks

Binance said it had taken precautionary measures to safeguard its platform, conducted security assessments and worked to verify that affected services were ready. The company said it aimed to restore withdrawals progressively as it completed security and readiness checks.

The first phase includes the named digital assets and others, but Binance did not provide separate reopening times for each one in the report. Its stated window is between 6am and 9am GMT on Sunday. The report does not give a calendar date for that Sunday.

Withdrawals had been temporarily suspended as a precaution while Binance worked to contain the incident’s loss, assess its impact, restore affected services and complete security checks. The company said it understood that reliable withdrawal access mattered to users, but described protecting users and the platform as its priority.

Binance also said deposit services remained open and were not affected. The exchange said user funds remained safe. Those are Binance’s statements about its response and customer funds; the report did not provide a separate assessment of those claims.

FBI Attributes the Attack to TraderTraitor

The FBI attributed the attack on Saturday to TraderTraitor, a North Korean state-sponsored hacking unit. The agency said law enforcement had observed members of the group converting stolen assets into ether. The FBI added that it expected further laundering through related technology.

The attribution came from the FBI, while the withdrawal schedule and recovery figures came from Binance. The National reported both developments but did not say the FBI’s statement changed Binance’s announced timetable.

The report also cited an earlier FBI attribution of a $1.5 billion theft from the cryptocurrency exchange Bybit to North Korea. It said the agency’s latest statement highlighted persistent security threats facing the industry.

Earlier Exchange Cases Put the Incident in Context

The National placed the Binance incident alongside earlier exchange failures. Mt. Gox, then the world’s largest Bitcoin trading platform, collapsed in 2014 after hackers stole hundreds of thousands of Bitcoins. The report also cited technical and operational failures in that collapse.

Eight years later, FTX, then the world’s second-largest cryptocurrency exchange, imploded amid revelations of fraud and misuse of customer funds. Its founder, Sam Bankman-Fried, was later sentenced to 25 years in prison, according to the report.

These examples were included as industry context. They do not establish that the incidents had the same causes or outcomes. The source report does not connect the Mt. Gox or FTX events to Binance’s current security checks.

Binance’s next stated step is the phased reopening during the Sunday window, subject to its security and readiness checks. The exchange said the less liquid 5 per cent of stolen tokens could take longer to source, while deposits remained open and unaffected.

For broader context on digital-asset activity, Coin Review News has covered crypto’s financial use and Avalanche tokenization activity. Its coverage also includes blockchain market forecasts; those separate articles provide sector context, not details about the Binance incident.

The exchange’s account of the phased plan and its stated recovery figures are available in The National’s report.