Your phone has a malware because Binance always send an email to confirm a withdraw, it's automatic. it means the guy had access to your email account which I'm pretty sure is gmail and that you emails directly on your phone. Same for 2FA.

Next time when you use 2FA, use a special device that is never connected to the internet except to synchrony the clock sometimes.