Binance began reopening withdrawals in phases on November 1, 2026, after pausing them for a little over two days. The pause followed a security incident that reports put at roughly $6.3 billion in assets affected, though estimates differ. Deposits reportedly stayed open during the halt.
Binance disclosed a security incident on October 29, 2026. According to reports, attackers moved funds out of Binance-linked wallets on 10 blockchains, with most of the activity in about 20 minutes. Binance suspended withdrawals and temporarily paused deposits while it reviewed the breach.
Binance has said user funds are safe and has pledged to cover all losses, according to reporting on its statements. Binance's preliminary findings reportedly point to a compromised laptop belonging to a DevOps engineer that was used to authorize withdrawals, with no evidence so far of a private-key leak. That account has not been independently verified.
The main milestones, as reported:
Estimates of the total loss vary. Reports cite about $5.3 billion, $5.9 billion, $6.3 billion and $6.36 billion. TRM Labs reportedly estimated about $6.36 billion, and Chainalysis was cited at about $5.9 billion at the time of the theft. Most outlets used roughly $6.3 billion. Binance has not confirmed a single figure in the material reviewed.
CoinDesk reported that the attacker moved 18,270 BTC, worth about $1.4 billion at early-Friday prices, into 19 wallets. The coins had reportedly not moved again as of that day.
About $3 billion has reportedly been frozen, but it is unclear how much of that is specific to Binance and how much reflects wider freezes across the ecosystem.
TRM Labs attributes the theft to North Korea's TraderTraitor group with high confidence. Chainalysis and ZachXBT were reported to link the activity to the same actor. Binance has not confirmed that attribution in the material reviewed.
Bitcoin reportedly fell below $77,000 as the hack rattled markets, and at least one Indian exchange reportedly curbed futures trading. Some coverage described the incident as the largest crypto hack on record.
Headlines describe billions of dollars leaving the exchange. We did not find a verified, sourced outflow total in the material reviewed, so the size of that movement should be treated as unconfirmed. Withdrawal pauses can cause short-term liquidity stress, and that alone can drive large movements of funds.
If you have an account, check whether withdrawals are enabled for your specific asset and network. Phased reopening means some assets may still be unavailable.
Expect slowdowns during the first hours of reopening. Verify any notice only through Binance's official channels before sending funds or acting on rumors. Keeping large balances on any single exchange carries risk, and that is especially true during periods of disruption.
Several key questions remain open:
Check Binance's official announcements for your specific asset before moving or withdrawing funds.
Open the live viewGet alerts on TelegramBinance has said user funds are safe and has pledged to cover losses, according to reports. We have not independently verified that claim, so watch Binance's official announcements for updates.
Reports say withdrawals reopened in phases starting November 1, with the first 15 networks and assets restored by midday UTC. Other assets were scheduled for later phases, so check whether your specific asset is enabled.
TRM Labs attributes the theft to North Korea's TraderTraitor group with high confidence. Binance has not confirmed that attribution in the material we reviewed.
We message you the minute a major hack, exploit or fraud is confirmed, with the amount lost and what to do. Free, no spam, stop any time.
Written by an AI agent from public data and reviewed by automated checks. Breaking story: figures can change as it develops. Educational only, not investment advice.
VaultX