Key Notes
- Binance reported approximately $3.64 billion in net outflows between 06:00 and 15:30 UTC on November 1, following its withdrawal restart.
- The exchange restored selected crypto routes across 15 networks and added five fiat-withdrawal currencies, including the US dollar, on November 2.
- Binance says 95% of affected assets have been replenished using company resources, a separate measure from recovering the stolen cryptocurrency.
Binance reported approximately $3.64 billion in net outflows during the first nine and a half hours after withdrawals resumed on November 1, as customers moved assets off the exchange following its roughly $6.3 billion hack.
The exchange said it processed $4.649 billion in withdrawals and $1.01 billion in deposits between 06:00 and 15:30 UTC on Sunday. It said withdrawal volumes were declining after an initial surge, while deposits remained substantial.
By Monday, Binance had also announced the return of additional fiat-withdrawal services. The developments shift attention from the initial shutdown toward the exchange’s ability to meet withdrawals, complete its security work and restore confidence.
we processed $4.649 billion in withdrawals and $1.01 billion in deposits
— Binance (@binance) November 1, 2026
The Outflow Figure Covers a Specific Window
The difference between outgoing and incoming assets produces the approximately $3.64 billion net figure. Gross withdrawals were higher, because more than $1 billion also entered the platform during the same period.
Binance put the net outflow at 2.1% of its $171 billion asset base, using its latest available Proof of Reserves data as of October 28. That denominator predates the hack and should not be mistaken for a newly verified post-incident balance sheet.
The percentage describes the value of assets, not the share of customers who left. Neither the outflow total nor the ratio establishes how many accounts withdrew funds, where those assets went or whether customers sold them.
It is also a nine-and-a-half-hour measurement, rather than a completed daily total. An earlier brief tracked Binance’s figures alongside a separate rolling 24-hour estimate. Different reporting windows should not be combined into a single tally.
Withdrawals Return Across Crypto and Fiat Routes
Binance began restoring crypto withdrawals at 06:00 UTC on November 1. Its subsequent update said all 15 networks and associated assets included in the first phase were available by 12:36 UTC, while testing continued elsewhere.
That is broader than the initial reopening covered on Sunday. It remains a staged restoration of selected asset-and-network combinations, rather than a declaration that every withdrawal service has returned.
In a November 2 fiat update, Binance added US dollars, UAE dirhams, Vietnamese dong, Philippine pesos and Indonesian rupiah to its available withdrawal currencies. CoinScreamer’s latest brief follows that expansion.
For customers, access still depends on the chosen currency, asset and transfer route. A functioning Bitcoin withdrawal does not establish the availability of every other token, just as restoring a fiat currency does not certify every payment channel.
Binance Says Asset Replenishment Reaches 95%
In its recovery update, Binance said it had covered approximately 95% of the affected amount, up from 90%. It attributed the remaining shortfall to less-liquid tokens that take longer to purchase in the required quantities.
The company says it is using its own resources and market and over-the-counter purchases to replace the assets. It has reiterated that the financial impact will fall on Binance rather than users.
As we previously reported, replenishing backing is different from recovering cryptocurrency from the attacker. The 95% figure is Binance’s statement about replacement funding, not confirmation that investigators have retrieved that proportion of the stolen assets.
That distinction also separates the hack loss from subsequent withdrawals. Customer transfers after reopening are not evidence of another theft or an additional $3.64 billion operating loss.
Investigators Continue Pursuing Stolen Assets
The FBI attributed the October 29 theft of more than $6 billion to North Korea, identifying the activity as TraderTraitor. The bureau said investigators had observed stolen assets being converted primarily into ether.
Circle separately told CNBC that it coordinated with law enforcement to freeze more than $1.1 billion in USDC associated with the incident. The stablecoin issuer said the investigation remains ongoing.
A freeze restricts the movement of identified tokens; it does not by itself establish that they have been returned to Binance. Nor should frozen amounts be added to the company’s replacement-funding percentage as if they measured separate, completed recoveries.
Bitcoin’s Price Is a Separate Market Signal
Bitcoin traded at approximately $77,977 on Coinbase at 09:43 UTC on November 2. The quote is specific to that venue and time, rather than a price applying to every exchange.
Assets leaving an exchange can move to another trading venue or a customer-controlled wallet without being sold. The withdrawal figures therefore cannot establish an equivalent wave of Bitcoin selling or explain a market-price change on their own.
The next measures of progress are sustained processing of withdrawals, further service restoration and verifiable updates on reserves and stolen-asset recovery. Binance’s account of stabilizing flows is an important operational update, while the longer-term effect on customer balances and trading activity remains to be seen.
