Co-CEO Richard Teng said on X that the company is taking a careful approach so services return safely, and that Binance will absorb the financial impact of the stolen funds rather than its users.
As of 7:36 a.m., withdrawals had resumed for 15 digital currencies, including Bitcoin, Solana and Ethereum, and by 10:30 a.m. Binance said it had processed about $4.6 billion in withdrawals and $1 billion in deposits.
Binance says about 95% of the stolen assets are now covered, using its Secure Assets Fund for Users, a reserve of roughly $1 billion in Bitcoin, along with its corporate treasury and its Futures insurance fund.
The remaining 5% is made up of tokens that are less liquid and take longer to buy at the needed scale than top coins such as Bitcoin and Solana.
Binance called the suspension a precaution while it contained the loss, assessed the impact and completed security checks, and said market conditions are stable.
Recovery is uneven for now. Binance's network status page on Sunday morning showed a mix of normal, partially suspended and fully suspended statuses: Bitcoin deposits and withdrawals were partially suspended, while Ethereum deposits were normal and Ethereum withdrawals were partially suspended. The company said it is prioritizing restorations based on user demand over the past week, is still testing remaining systems, and warned of possible delays or longer processing times. Binance previously blamed North Korean hackers, and the FBI said Saturday that a group known as TraderTraitor was responsible and was converting the assets mainly into Ethereum, with further laundering likely. A group of crypto firms had frozen about $3 billion of the stolen assets, and Binance says it will publish a more detailed incident report when its investigation is complete.