Binance processed $4.649 billion in withdrawals and $1.01 billion in deposits between 06:00 and 15:30 UTC on November 1, leaving approximately $3.64 billion in net outflows. The nine-and-a-half-hour reporting period followed the restoration of customer transfers after a reported $6.3 billion theft.

The net outflows represented 2.1% of Binance’s stated $171 billion in assets under management. Withdrawal activity surged after transfers resumed but declined in later 30-minute intervals, while deposits remained insufficient to offset funds leaving the exchange.

Binance began restoring withdrawal services in phases at 06:00 UTC on November 1, 2026. By 12:36 UTC, withdrawals had resumed for all 15 networks and assets included in the initial phase. The exchange said:

After an initial spike, withdrawal volumes have declined and are stabilising as expected, while deposit… pic.twitter.com/ZSnYGCTp9d — Binance (@binance) November 1, 2026

The post was published on X. Binance also provided a security incident and recovery update.

Withdrawal Activity Eases as Networks Return

Binance restored withdrawals across 15 blockchain networks on Sunday, including Bitcoin, Ethereum, Solana, Tron, BNB Smart Chain and XRP Ledger. Arbitrum was also among the networks returning to service.

The reopening took place in stages rather than across all networks simultaneously. Customer demand influenced which assets received priority, while operational and security checks determined when individual transfers could resume.

A chart tracking activity in 30-minute intervals showed the highest withdrawal volumes near the start of the reopening. Later intervals recorded progressively smaller amounts, even though deposits continued to trail withdrawals. Some customers could still experience delays as remaining services returned, leaving the completion of that restoration among the near-term markers of the recovery.

Reuters separately cited DefiLlama data showing more than $3.5 billion in net outflows from Binance on Sunday. That independent measure broadly matched the $3.64 billion figure reported by Binance for its nine-and-a-half-hour window.

The data showed substantial movement of customer funds but did not indicate an uninterrupted acceleration in withdrawals. Binance described conditions as stabilizing, although withdrawals continued to exceed incoming transfers during the reporting period.

Binance Reports Asset Freezes After Hot-Wallet Breach

The withdrawals followed an October 29 hot-wallet breach. In an October 30 update, Binance said a compromised engineer’s laptop may have enabled unauthorized transactions through a service container. Investigators had not identified leaked private keys.

The FBI attributed the attack to North Korea’s TraderTraitor operation — the agency’s designation for North Korean cyber campaigns targeting cryptocurrency firms — and warned that decentralized finance services could facilitate laundering. Binance said it had worked with partners to freeze approximately $3 billion in stolen assets, just under half of the reported $6.3 billion total.

The exchange also said company resources had replenished about 95% of affected token balances, separately from the recovery of stolen assets. Binance pledged to cover losses itself while withdrawal operations and reserve verification continued.

A Proof of Reserves snapshot taken on October 31 showed 10 major assets fully backed, according to Binance. However, the snapshot preceded Sunday’s withdrawals and therefore did not measure any subsequent changes in reserves.

The accompanying zero-knowledge proof was still being calculated, with publication expected on November 3. The proof relates to that October 31 snapshot rather than to any balance changes since Sunday’s withdrawals, making its release the next scheduled step in the exchange’s reserve verification.