Binance sets phased withdrawal restart

In short

• Binance said on 1 November 2026 it would resume withdrawals in phases, with phase one from 06:00 to 09:00 UTC.

• The exchange says it has covered 95% of the $6.3bn in tokens stolen in the largest crypto heist on record.

• The FBI on Saturday attributed the attack to TraderTraitor, a North Korean state-sponsored hacking unit.

• Binance said deposit services stayed open and user funds remain safe.

Which assets can be withdrawn first?
Why is Binance reopening in phases?
Who was behind the Binance hack?
What the phased restart means for Binance users
How Binance users reacted on X
Binance hack and withdrawal figures

Binance withdrawal suspension to phased restart

• 30 Oct 2026: Binance temporarily suspended withdrawals until the security issue was resolved

• 30 Oct 2026: Binance set aside over $6.34bn, covering about 80%

• 1 Nov 2026: First phase of withdrawals due 06:00 to 09:00 UTC

Binance withdrawal restart: your questions
Is Binance currently suspended?
What is happening with Binance withdrawals?
Was Binance hacked by North Korea?
Is Binance safe from hackers?
Our view

Binance, the world's largest cryptocurrency exchange, said on 1 November 2026 that it would restore customer withdrawals in stages, with the opening phase expected to run from 06:00 to 09:00 UTC, according to the company's own update. The staggered restart follows the largest cyber theft on record, in which more than $6bn was taken, according to Bloomberg, and Binance has now covered 95 per cent of the $6.3bn in stolen tokens, The National reported. The venue, the biggest for trading Bitcoin, ether and other digital assets, had left users waiting to move their funds while withdrawals were paused.

Phase one will cover 15 assets across 15 networks, including Bitcoin, ether, BNB, TRX, SOL, XRP, ZEC, dogecoin, TON, POL, AVAX, ARB, BASE, OP and SUI, according to Odaily and posts on X. At the time of writing (06:15 UTC on 1 November 2026), Bitcoin (BTC) traded at $77,888, up 0.9% in 24 hours with a market value of $1.57tn, while Ethereum (ETH) traded at $2,272, up 1.36% in 24 hours with a market value of $278bn, according to InvestIn.News market data. Binance had said on 30 October that it was temporarily suspending withdrawals until the security issue was resolved, according to Binance.

The exchange's coverage of the stolen amount has moved from about 80 per cent on 30 October, according to ChainCatcher, to 90 per cent on 31 October, according to msn.com, and to 95 per cent, The National reported. The remaining 5 per cent is less liquid assets that may take longer to source, according to The National. Binance said it would absorb the financial impact rather than pass losses to customers, adding: 'user funds remain safe.'

The FBI on Saturday linked the Binance hack to TraderTraitor, a North Korean state-sponsored hacking unit, according to The National and The Times of India. Members of the group had been observed by law enforcement converting the stolen assets into ether, and the FBI said it expected further laundering through related technology. The National reported that this is the latest in a series of North Korean-linked thefts from crypto exchanges, including an earlier $1.5bn theft from Bybit.

Users whose withdrawals were paused can check the phase-one list to see whether their asset is among the first 15 assets and 15 networks. Binance said user funds remain safe and that it will absorb the financial impact rather than pass losses to customers, according to The National. The report had been planned for Monday, 2 November 2026, but the snapshot went live ahead of schedule, with the full zero-knowledge proof delayed to Tuesday, 3 November 2026, according to Binance News Update.

On X, Litest (@Litest) said Binance would resume withdrawals in phases between 06:00 and 09:00 UTC, and Aman Sai (@amansaiofficial) said the official blog confirmed that start time. AR Sojib (@Sojib0xAR) said phase one would cover 15 assets across 15 networks, including BTC, ETH and BSC. VALAI (@ValeriusLabs) said coverage of the stolen amount had reached 95 per cent, up from 90 per cent in the prior update, and that the top ten tokens were fully backed. Binance (@binance) and Binance Africa (@BinanceAfrica) also posted the update.

Binance is resuming withdrawals in phases on 1 November 2026, with the first phase due between 06:00 and 09:00 UTC, according to Binance's update. Withdrawals were temporarily suspended on 30 October as a security measure, but deposit services stayed open. Users can check the exchange's recovery update for the phase-one asset list.

Binance said its first withdrawal phase covers 15 assets across 15 networks, including Bitcoin, ether, BNB, SOL and XRP. The exchange says it has covered 95 per cent of the $6.3bn stolen, with the remaining 5 per cent less liquid. A full proof-of-reserves report is due on 2 November 2026, according to Odaily.

The FBI on Saturday attributed the Binance hack to TraderTraitor, a North Korean state-sponsored hacking unit, according to The National and The Times of India. The FBI said it observed members converting stolen assets into ether and expected further laundering. Binance says it will absorb the financial impact rather than pass losses to users.

Binance says user funds remain safe and that it will absorb the $6.3bn loss itself. The exchange has covered 95 per cent of stolen tokens and is resuming withdrawals in phases after security checks. The FBI attributed the attack to North Korea's TraderTraitor unit.

At InvestIn.News, we think Binance's withdrawal resumption is best read as a procedural step, not a declaration that the security risk has passed. The exchange is restoring withdrawals network by network after a temporary freeze, which shows the operational caution that led it to pause services in the first place.

The recovery figures changed as Binance worked through the weekend. It said it had covered about 80 per cent of the stolen tokens on 30 October, then 90 per cent on 31 October, and 95 per cent in the 1 November update. Those steps matter because they show how quickly an exchange can source liquidity after a $6.3bn theft, but they do not by themselves prove the underlying system is safe.

For our team, the useful discipline is to watch the announced full proof-of-reserves report due on 2 November. If Binance publishes the report and phase-one withdrawals run without interruption, that would support the exchange's claim that user funds remain safe. Until then, the phased restart is better understood as controlled reopening, not an all-clear. This is a read of the exchange's process, not investment advice.

How we reported this: this story draws on reporting by Binance (@binance) on X, Bloomberg, The Times of India, Binance and thenationalnews.com, plus four more sources, seven public posts shown in the story and InvestIn.News market data. Each source is linked in the text and listed under Sources.

Follow the latest news as it breaks on NewsFeeds.

What to watch: Binance plans a full proof-of-reserves report on 2 November 2026, according to Odaily.