Obviously that had to come into limelight since the total amount is about $15.2 million which is a lot. The 2 BTC unverified withdrawal limit was considered good since it helped to keep the anonymity aspect of bitcoin safe but hackers have used it to their advantage and I am quite sure now that the lawsuit is raised this limit will be removed too. Now onwards people will have to do a KYC just to create an account on Binance and I guess other exchanges will follow the suit.
Binance should have thought a work around for such an attack earlier since it is quite obvious that even if a hacker tries to create 500 fake accounts and uses 2 BTC unverified withdrawal for each account then he will be able to withdraw 1000 BTC without any KYC.
I'm extremely surprised the way they would have divided this money into parts and had the guts to send these coins directly to Binance (as they probably knew that if they mix their coins and send them to Binance, Binance would either block or seize their coins until a KYC would have been conducted). So, no mixing services involved, how the hell were they able to transfer such a big amount to Binance without coming into limelight is what's crushing my brain atm.