A tally by Darkfost on CryptoQuant puts Tether (USDT) withdrawals from Binance at $1.96 billion since the exchange began restoring withdrawals in phases after a $6.3 billion theft.
Darkfost also counted 19,569 Bitcoin (BTC), worth nearly $1.5 billion; 154,147 Ether (ETH), worth nearly $360 million; and $557 million in USD Coin (USDC). The Nov. 1 analysis gave no precise cutoff time for those figures.
Binance reported $4.649 billion in withdrawals from 1 to 10:30 a.m. ET (06:00 to 15:30 UTC) on Nov. 1. Deposits of $1.01 billion during that window left about $3.64 billion in net outflows. Darkfost’s tally covers an unspecified period, so its asset figures cannot be directly compared with Binance’s timed totals.
The previously reported net outflow reflects deposits offsetting withdrawals after service began returning. The separate $6.3 billion figure is Binance’s estimate of assets lost when attackers compromised its hot wallets on Oct. 29.
Binance said withdrawals were available on all 15 networks in its first reopening phase by 7:36 a.m. ET (12:36 UTC) on Nov. 1. Its update did not set a date for later phases. The Federal Bureau of Investigation (FBI) attributed the theft to North Korea and called the malicious cyber activity TraderTraitor.
Binance put its coverage of the impacted amount at about 95% on Nov. 1 and said it would bear the financial loss. It said it was still seeking thinly traded tokens that made up the remaining portion. The exchange said its funding included corporate money and portions of its Secure Asset Fund for Users and futures insurance fund.
Binance’s initial inquiry pointed to a compromised laptop, but the exchange later identified other suspected breach points. It said it had found no evidence that wallet private keys were exposed. Binance expects full cryptographic proof for its Oct. 31 reserves snapshot by Nov. 3 UTC.
