Binance reopens withdrawals, logs $3.64 billion in net outflows days after $6.3 billion hack

Binance restored customer withdrawals on Sunday, four days after a $6.3 billion theft from its hot wallets, and users pulled money out faster than they put it back. The exchange said it processed $4.65 billion in withdrawals against $1.01 billion in deposits between 1 a.m. and 10:30 a.m. ET — a net outflow of about $3.64 billion in the first nine and a half hours — according to statements it posted on X, reported by The Block.

Binance framed the drawdown as manageable, calling it 2.1% of its $171 billion in assets under management as of its Oct. 28 proof-of-reserves snapshot. That figure, and the characterization that volumes are "stabilising as expected" after an initial spike while deposits "remained substantial," come from the exchange itself.

Independent tracking runs higher. DefiLlama, which monitors $131.1 billion across Binance's wallets, showed $4.05 billion in net outflows over the 24 hours to 11:14 a.m. ET — a larger number over a longer window than Binance's own tally. Over the same period, rival OKX logged $316.8 million in net inflows, per the same data.

Withdrawals reopened in phases. Binance's status page showed all 15 networks in its first phase restored by 7:36 a.m. ET, but as of 11:22 a.m. ET withdrawals remained suspended for 531 of 552 listed coins, with 14 — including bitcoin and ether — only partly restored. Cardano, Chainlink, Hyperliquid, Litecoin and NEAR were still being tested.

Key facts

• $3.64B net outflow in first 9.5 hours after reopening ($4.65B out, $1.01B in) — Binance via The Block.
• 2.1% of $171B AUM, per Binance's Oct. 28 proof-of-reserves data — Binance.
• $4.05B net outflow over 24 hours to 11:14 a.m. ET; OKX +$316.8M same window — DefiLlama via The Block.
• 531 of 552 coins still suspended at 11:22 a.m. ET; BTC and ETH partly restored — Binance status page.
• Thursday's hack drained ~$6.3B; FBI attributed it Saturday to North Korea's TraderTraitor group — The Block.
• Updated reserves report (Oct. 31 snapshot, zero-knowledge proofs) projected Monday; co-CEO Richard Teng said 90% of stolen assets replenished — Binance.

The real-world read

Nearly every reassuring number here originates with Binance, the interested party. Its "2.1%" rests on an Oct. 28 reserves snapshot taken before the hack and before the run; the exchange says a fresher Oct. 31 report lands Monday, so the current ratio is being measured against stale denominators. DefiLlama's independent $4.05 billion — bigger than Binance's $3.64 billion over a longer window — suggests outflows may be running ahead of the exchange's framing, though the two cover different periods. With 531 of 552 coins still frozen, "reopened" is partial, and Teng's claim of 90% replenishment and full coverage remains unverified pending the promised proof-of-reserves. Worth watching Monday: whether the on-chain snapshot matches the messaging.

Not financial advice.

Sources: The Block (reputable secondary), "Binance sees $3.64 billion in net outflows after reopening withdrawals following record hack," 2026-11-01 — provided outflow figures, the DefiLlama and OKX comparison, status-page detail, and the FBI attribution; itself cites Binance's X posts and status page (interested-party statements), DefiLlama (independent on-chain tracker), and the FBI.