Binance customers withdrew $3.64bn (£2.72bn) of assets from the crypto exchange when it reopened on Sunday after a record hack last week, according to a post by Binance on X.
Binance said it processed $4.649bn in withdrawals and $1.01bn in deposits between 06:00 and 15:30 GMT on November 1. It described an "initial spike" in withdrawals that later declined and is "stabilising as expected."
The hack affected $6.3bn worth of digital assets, according to the report. Binance said it has covered around 95% of the stolen assets and that the remaining amount may take longer to source. It said it has reserved more than $6.34bn to deal with the fallout.
The US Federal Bureau of Investigation and other major organisations have accused North Korea of responsibility for the attack. The report attributes the attack to TraderTraitor, a North Korean cybercrime group also known as the Lazarus Group. The FBI published a list of cryptocurrency wallet addresses linked to the group on Saturday and urged industry partners to block transactions involving them.
Binance said early checks suggest the incident may have started with a compromised laptop belonging to an engineer. The hack hit Binance.com, while the company said its US-facing platform was not affected.
Withdrawals of more than two dozen major cryptocurrencies, including Bitcoin and Ethereum, have resumed. Binance said other services will resume in phases once security checks are complete.
"Our commitment remains the same: Binance will fully cover the financial impact of the funds stolen in this incident," the firm said.