Binance saw a spike in customer withdrawals after it resumed withdrawals for some assets on Sunday, Reuters reported. The exchange is recovering from the theft of $6.3 billion in tokens from its platform.
Binance said it had covered 95% of the stolen assets. A spokesperson said withdrawal volumes "spiked at the beginning" but were now "seeing a sharp downward trend" and "stabilising to what we would consider normal and expected on-chain activity."
DefiLlama, a crypto analytics platform, said Binance recorded more than $3.5 billion in net outflows on Sunday. Binance did not comment on that data.
Withdrawals are being restored in phases. The first phase covered 15 tokens, including bitcoin, ether, some USDC and USDT stablecoins, and dogecoin.
The FBI said on Saturday that TraderTraitor, a North Korean state-sponsored unit, was responsible for the attack. Law enforcement observed members of the unit converting stolen assets into ether, the FBI said. US President Donald Trump said on Saturday it remained unclear whether North Korea was involved. Pyongyang did not respond to requests for comment.
Binance said it has used company funds to buy replacement tokens, drawing from its Secure Asset Fund for Users, its Futures Insurance Fund and its corporate treasury. Co-CEO Yi He said the exchange would use 50% of the SAFU fund and replenish it to about $1 billion.