Skip to content
Coin News Media
November 2, 2026
Coin News Media
Binance

Binance Withdrawals Set to Resume Nov. 1 After 95% Asset Recovery

Binance plans to resume withdrawals in stages following a 95% asset recovery after a massive security breach. The phased restart will initially cover 15 blockchain networks, with Binance absorbing the financial impact using corporate reserves.

Binance Withdrawals Set to Resume Nov. 1 After 95% Asset Recovery

Binance plans to resume withdrawals in stages between 06:00 and 09:00 UTC on Nov. 1, following the replacement of roughly 95% of the assets impacted by a $6.3 billion security breach. The exchange noted that this restoration depends on ongoing security and infrastructure verifications.

“We aim to restore withdrawals progressively as we complete security and readiness checks,” Binance stated. This window signals the beginning of the restoration process rather than a guarantee that every account, asset, or network will become accessible instantly.

The initial phase encompasses 15 blockchain networks, such as Bitcoin, Ethereum, XRP Ledger, BNB Smart Chain, Solana, Tron, and Dogecoin. Binance warned that individual assets and networks may reappear at varying times.

What Happened: Binance Set a Phased Withdrawal Restart

Which networks are included first?

The initial wave also features Avalanche, Sui, Polygon, and Arbitrum. Withdrawals for Tether (USDT) and USD Coin (USDC) are slated to resume across various networks. Binance selected these assets partly based on withdrawal demand observed over the preceding week.

Service will reactivate as verification checks conclude. According to U.Today, deposit functions remained active throughout the suspension.

Along with major cryptocurrencies, Binance identified Zcash (ZEC), Avalanche (AVAX), Sui (SUI), Polygon (POL), and Arbitrum (ARB) for the opening phase. The platform did not state that all 15 networks will go live simultaneously.

Why is the restart staged?

Binance temporarily halted withdrawals to contain the security incident, conduct investigations, and stop further outflows. Security testing and operational readiness evaluations remain ongoing. The announced timeframe initiates a phased procedure, meaning not all withdrawal channels will open at once.

Recovery updates were issued rapidly following the Thursday theft. Binance reported that it had replenished 80% of the impacted assets by Friday, 90% by Saturday, and approximately 95% by Nov. 1. A restart date was scheduled while efforts continued to replace the remaining, less-liquid tokens.

Since deposits stayed open during the shutdown, outbound transfers are the primary change for users. Customers must designate the proper blockchain network for each asset. Binance has not verified that an asset available on a specific network will be accessible across all networks concurrently.

Who Is Behind Binance’s Recovery?

How does Binance say it will cover the loss?

Binance emphasized that it will absorb the financial impact instead of transferring losses to its users. A representative told Cointelegraph that the company is utilizing its corporate treasury, a section of the Secure Asset Fund for Users (SAFU), and a segment of its futures insurance fund.

“Binance will absorb the financial impact of the stolen funds, not users,” the representative explained. The exchange added that its futures insurance fund will stay above mandatory risk-management thresholds, though it did not specify the exact contributions from each source or the minimum balance of the fund.

The $6.34 billion provision from Binance incorporates the compromised cryptocurrencies alongside broader resources allocated for the event. Conversely, the replenishment percentage measures the proportion of impacted assets the exchange has successfully substituted.

Who has been linked to the attack?

TRM Labs attributed the security breach to North Korea’s TraderTraitor hacking collective. Binance concentrated its efforts on limiting the damage, replacing compromised assets, and bringing withdrawals back online.

The event has been classified as the largest cryptocurrency hack on record. Tether and Circle froze addresses tied to the incident following the theft, while Binance launched its proprietary replacement initiative. These freezes diminished the circulating supply of affected assets, but they did not serve as a funding source for Binance’s recovery.

How Binance Replenished Assets and Funded Recovery

How did the replenishment figure change?

Binance’s stated replenishment climbed from 80% on Friday to 90% on Saturday, reaching roughly 95% by Nov. 1. The outstanding assets consist of illiquid tokens that present greater acquisition challenges in large volumes.

The exchange reported that balances for Bitcoin, Ethereum, XRP, Solana, BNB, USDT, USDC, Zcash, USD1, and Ripple USD are fully backed. It also refreshed its reserve data while preparing a comprehensive cryptographic proof.

Binance acquired replacement tokens via open-market transactions and over-the-counter trades. These acquisition methods are critical for addressing the remaining gap, as standard exchange trading might lack sufficient liquidity to absorb large orders without disrupting market prices or order book depth.

The 80%, 90%, and 95% milestones reflect sequential phases of recovery. Binance was actively managing the remaining 5% shortfall when it published the withdrawal timetable. The firm has not clarified what portion of the stolen crypto was recovered directly versus newly purchased.

What happened to the stolen assets?

The breach involved approximately $6.3 billion in cryptocurrency drained from Binance hot wallets. Tether and Circle froze nearly $3 billion of those tainted assets independently of Binance’s token replacement efforts.

Industry stakeholders froze these funds subsequent to the attack; the capital did not originate from Binance’s treasury, SAFU, or futures insurance fund. Instead, Binance’s strategy depended on restoring customer ledger balances and reopening withdrawals once safety protocols were met.

How much did Binance set aside?

Binance separately reported setting aside $6.34 billion to handle the losses, which included $5 billion allocated to the impacted cryptocurrencies.

The $5 billion digital asset component required additional validation. The broader $6.34 billion figure represents the complete loss provision. Binance has not detailed the exact allocation of the $5 billion and supplementary funds across its corporate treasury, SAFU, and futures insurance fund.

When is the reserve proof expected?

Binance indicated that generating its complete zero-knowledge proof requires a computational process lasting roughly 40 to 50 hours. According to The Defiant, the full proof was anticipated by Nov. 3.

Binance’s updated reserves page displays balances it claims are fully backed. The complete cryptographic proof aims to substantiate this broader reserve disclosure. Until released, statements regarding asset replacement rely partly on data supplied by the exchange.

Why the Withdrawal Pause Matters to Users

What changes for customers?

Withdrawals will reactivate in stages, beginning with networks and assets prioritized by recent demand metrics. Users should verify the exact asset and network designation provided by the exchange before initiating transfers, as deployment is not simultaneous.

An asset appearing on the initial phase list may remain inaccessible until its designated network finishes readiness verifications. Because Binance has not published specific activation times for every asset, the 06:00 to 09:00 UTC window does not serve as a universal launch time for all routes.

Customers should monitor live platform status updates, verify that withdrawals are operational on their chosen network, and confirm that receiving platforms support it. An active deposit gateway does not automatically mean the corresponding withdrawal route is open.

Why the incident matters beyond Binance

The security breach is noted as the largest crypto hack to date. Binance’s containment strategy merges internal corporate funding, insurance allocations, token substitution, and cryptographic reserve transparency. Market trust in the recovery will lean heavily on the accuracy and punctuality of that proof.

Observers and customers must weigh three key inquiries: whether Binance can replace the compromised balances, whether it can cryptographically verify those replacements, and whether its technical framework can securely process outgoing transfers. The Nov. 1 restart focuses on operational functions, while the proof slated for Nov. 3 targets verifiable evidence.

Risks as Binance Restores Withdrawals

Binance was still processing its full cryptographic proof, and CertiK noted that it required additional data to authenticate the exchange’s reported $5 billion in replacement cryptocurrencies. Binance has kept confidential the exact funding distribution among its corporate treasury, SAFU, and futures insurance fund.

The remaining 5% deficit is comprised of illiquid tokens, and Binance has cautioned that assets and networks may become available at different times. Potential verification delays or difficulties in sourcing these low-liquidity assets could decelerate the rollout.

Technical recovery and cryptographic validation remain distinct operations. Certain networks might clear infrastructure checks prior to the delivery of complete reserve documentation. Conversely, a published proof does not imply that every network has cleared the safety protocols necessary to reactivate withdrawals.

Binance’s forthcoming public milestones involve the phased activation of first-phase networks and the finalization of the zero-knowledge proof, projected around Nov. 3. The exchange has not established a firm completion schedule for substituting all remaining low-liquidity tokens or provided a granular breakdown of its funding sources.

FAQ

How much of the affected assets did Tether and Circle freeze?

Tether and Circle froze about $3 billion in affected assets. Those freezes were separate from Binance’s replacement of stolen tokens.

Which assets were named for the first withdrawal phase?

Binance named networks including Bitcoin, Ethereum, XRP Ledger, BNB Smart Chain, Solana, Tron, and Dogecoin, among others. The rollout also included stablecoins USDT and USDC across multiple networks.

Who is covering the stolen funds?

Binance said it would absorb the financial impact rather than pass losses to users. Funding would come from the corporate treasury, part of SAFU, and a portion of the futures insurance fund.

Why are some tokens harder to replace?

The remaining shortfall consists of less-liquid cryptocurrencies that are difficult to buy in large quantities. Binance said it continued purchasing replacement assets through market and over-the-counter transactions.

What is the reserve proof Binance is preparing?

It is a full cryptographic proof intended to support Binance’s reserve disclosure. The exchange estimated that generating it would take about 40 to 50 hours, and The Defiant reported it was expected by Nov. 3.

How much did Binance say it set aside to cover losses?

Binance said it had set aside $6.34 billion to cover losses. That included $5 billion in the affected cryptocurrencies.

Which balances did Binance say were fully backed?

Binance said balances in Bitcoin, Ethereum, XRP, Solana, BNB, USDT, USDC, Zcash, USD1, and Ripple USD were fully backed. It also published updated reserve information while working on a complete cryptographic proof.

This article is for information only and is not financial advice.

Anastasia Viktorova

Web3 PR Specialist | KOL | Blockchain Advocate | Digital Strategy Expert based in Moscow, Russia. Focused on Web3 communications, blockchain, digital strategy, and community growth.

More from this author

Related stories

Comments 0 responses

Join the discussion

Comments are moderated and appear after review.