Customers withdrew a net $3.64 billion from Binance on the day the exchange reopened withdrawals, days after about $6.3 billion was drained from its wallets in the largest cryptocurrency theft on record.

Binance processed $4.649 billion in withdrawals against $1.01 billion in deposits on Sunday, leaving a net outflow of $3.64 billion, Hiru News reported on Monday morning, citing the BBC and attributing the figures to the exchange’s own account on X. The two figures net to $3.639 billion, which matches the total given.

What reopened

Bitcoin, Ether and selected stablecoin services began coming back online on Sunday, Al Jazeera reported. CNN carried the resumption the same day. Binance had suspended all transactions after the breach.

The exchange says it has now replaced approximately 95% of the affected assets, up from the 90% it reported on Saturday, when this desk covered the FBI’s attribution. Completing the remainder may take some time, the company says. Al Jazeera quotes its position as: “Binance will absorb the financial impact of the stolen funds, not our users.”

Who is blamed

The FBI and other US agencies attribute the theft to North Korea, specifically the unit it designates TraderTraitor, which is linked to the Lazarus Group. The same group was blamed for the record $1.5 billion theft from the Bybit exchange in 2025, after which the FBI published a list of associated wallet addresses.

A note on one detail

Hiru’s English URL slug describes customers as having “recovered” $3.6 billion. Its Sinhala text, and the withdrawal-minus-deposit arithmetic above, describe something different — money leaving the exchange, not stolen funds returned to victims. This article follows the figures.

Not reported

The $3.64 billion net figure covers Sunday only and comes from Binance itself; no verified outlet this desk could reach had independently audited it. Non-verified crypto trade publications have since published a larger net-outflow figure measured over a rolling 24-hour window, so the measurement period matters when comparing numbers. Binance has not said what share of total customer assets the outflow represents, and no Sri Lankan exposure to the exchange has been reported.