Binance says the first phase of withdrawals will resume from 06:00 to 09:00 GMT on Sunday
Binance said in its fourth recovery update that it will restore withdrawals in phases, starting with 15 networks between 06:00 and 09:00 GMT on 1 November. It says it has now covered about 95% of the assets stolen in the 29 October theft. Deposits remain open, and other networks will follow after security checks.
Binance, the world’s largest cryptocurrency exchange, said on Sunday 1 November that it will resume withdrawals in phases, with the first phase running from 06:00 to 09:00 GMT that day. Binance published the timing in its fourth recovery update, headed “Withdrawals Resume in Phases”. As of 04:55 GMT on Sunday that window had not yet opened, and this report will be updated when Binance or other sources confirm that withdrawals are live.
What Binance said. According to ChainCatcher, TokenPost and CoinLive, which reported the update, the first phase covers 15 networks: Bitcoin, Ethereum, BNB Chain, Tron, Solana, XRP, Zcash, Dogecoin, TON, Polygon, Avalanche C-Chain, Arbitrum, Base, Optimism and Sui, with selected assets on each. Binance said it chose the order using the past week’s user demand and will reopen each network once security and stability checks are complete. Other networks and assets will be added “as they become ready”, CoinLive reported. Binance said deposits remain open and were not affected, and that heavy traffic at the start may cause delays or failed withdrawals, which users can retry later.
Replenishment. Binance said it has now covered about 95% of the assets stolen on 29 October, up from about 90% in its previous update, according to CoinLive and TokenPost. Binance said ten tokens, including BTC, ETH, USDT, BNB, SOL, USDC and XRP, are 100% backed. The remaining roughly 5% is in less liquid tokens that it is still buying on the market and over the counter. “Binance will absorb the financial impact of these stolen funds, not our users,” the exchange said in its earlier update on Saturday.
What came before. On Friday 30 October Binance said it aimed to start resuming withdrawals within about 34 hours, subject to security checks. In its Saturday update it said the full proof of reserves is expected by Tuesday 3 November (UTC). The FBI said on Saturday that North Korea was responsible for the theft; see our report on the FBI’s statement. For the earlier steps, see Binance’s 90% replenishment update and our first report on the suspected hack.
Sources
- Security Incident | Recovery Update #4: Withdrawals Resume in Phases (2026-11-01) · Binance (@binance on X)
- Binance to Resume Withdrawals in Phases on Nov. 1, Says 95% of Loss Covered · CoinLive
- Binance Plans Staged Withdrawals Across 15 Networks After Replenishing 95% · TokenPost
- Binance: Will resume the first phase of withdrawals today from 14:00 to 17:00 · ChainCatcher
- Security Incident | Recovery Update #3: 90% of Stolen Assets Replenished; Proof of Reserves Snapshot Provided (2026-10-31) · Binance (via LiveNews.co.nz)
- Security Incident Update #2 (2026-10-30) · Binance Support
Related coverage
All crypto →
FBI says North Korea was responsible for the more than $6 billion theft from Binance
The FBI said on Saturday that North Korea, through the unit it calls TraderTraitor, was responsible for the theft from Binance on or about 29 October. TRM Labs and Chainalysis had earlier assessed the same group. Binance says users will not bear the loss and that it has replenished about 90% of the stolen assets.
Binance says it has covered 90% of the $6.3 billion stolen in its hack and is on track to resume withdrawals on 1 November
Binance said on Saturday that it has restored backing for about 90% of the token assets stolen from its hot wallets, using company funds, part of its SAFU emergency fund and part of its futures insurance fund. It says users will not bear the loss and that withdrawals should resume on 1 November, subject to security checks.
Binance suspends withdrawals as suspected hack drains more than $5.5 billion from its wallets
On-chain trackers put the outflow from Binance-linked wallets at between $5.57 billion and $5.84 billion. Binance says user funds are safe and that it is investigating. Tether and Circle have frozen more than $2 billion of stablecoins. If confirmed, it would be the biggest crypto hack on record.
Coinbase says analytics vendor Amplitude's security incident exposed some customer contact data
Coinbase said a security incident at analytics provider Amplitude affected contact data for a 'small subset' of its customers. The exchange said its own systems were not breached and customer funds were not affected.
Binance applies for Brazil crypto licence ahead of 30 October deadline, delists 22 tokens locally
Binance said it applied to Brazil's central bank for a virtual asset service provider licence through its local unit. From Tuesday it restricted eight services and delisted 22 tokens for Brazilian users.
CoinDCX confirms 15.99 million USDT loss from old wallets after earlier denying a new hack
Indian crypto exchange CoinDCX said on 25 October that about 15.99 million USDT was lost from operational wallets it had retired after a July 2025 breach, because of a failure in its deposit-sweeping service. It said it absorbed the loss and that customer balances were not affected.
