Binance saw an initial spike in customers pulling money out after the exchange resumed withdrawals for a number of assets on Sunday, as it tries to recover from the theft of $6.3 billion in tokens from its platform in a hack the FBI and analysts have tied to North Korea, Reuters reported in an updated dispatch on Sunday. Binance said it had now covered 95 percent of the stolen assets, and said after an initial spike, withdrawals were stabilizing. A Binance spokesperson said in an emailed statement: 'Withdrawal volumes spiked at the beginning, however we are seeing a sharp downward trend and withdrawal levels are stabilising to what we would consider normal and expected on-chain activity.' The spokesperson said the withdrawals represented a very small percentage of assets under management and added: 'Rest assured that market conditions are stable.'

Source: Reuters via WNCY, Nov 1, 2026

The exchange's own numbers put a precise figure on the rush. Binance recorded about $3.64 billion in net outflows in the first nine and a half hours after it began restoring withdrawals on Sunday, the exchange said: it processed $4.65 billion in withdrawals and $1.01 billion in deposits between 06:00 and 15:30 UTC, and put the net outflow at 2.1 percent of its $171 billion in assets under management, based on its latest proof-of-reserves data from October 28, The Block reported. Yaani: $3.64 billion is about 364 crore dollars pulled out, net, in a single morning — against total stated assets of $171 billion, yaani about 17,100 crore dollars. Binance began restoring withdrawals in phases at 06:00 UTC and reopened all 15 networks and assets in its first phase by 12:36 UTC, and withdrawal volumes have declined and are 'stabilising as expected' while deposit volumes 'have remained substantial', according to Binance.

Source: The Block, Nov 1, 2026

Independent trackers broadly matched the exchange's account, with one running higher. The world's biggest cryptocurrency exchange recorded more than $3.5 billion in net outflows on Sunday, crypto analytics platform DefiLlama said on its dashboard, Reuters reported; Binance did not comment on the DefiLlama data. By a later DefiLlama reading, Binance saw $4.05 billion in net outflows over 24 hours as of 11:37 a.m. ET, while the next 10 largest exchanges by assets that DefiLlama tracks saw about $368 million in combined net inflows over the same period, led by OKX at $316.8 million; Bitfinex and Gate posted net outflows of $106.3 million and $34.5 million respectively, and Binance's bitcoin balance fell by about 19,289 BTC over 24 hours according to CoinGlass, The Block reported.

The reopening is still only partial. Binance is still testing the remaining networks and assets, which include Cardano, Chainlink, Hyperliquid, Litecoin and NEAR, according to its status page; as of 11:22 a.m. ET the page showed withdrawals suspended for 531 of the 552 coins listed, with 14 others, including bitcoin and ether, partly restored, The Block reported. Binance now processes withdrawals from newly generated wallets added to its proof-of-reserves list, and said an updated proof-of-reserves report, based on an October 31 snapshot and computed with zero-knowledge proofs, is projected to be released on Monday. Binance co-CEO Richard Teng said on Saturday the exchange had replenished 90 percent of the stolen assets and would cover the rest.

Sunday's flows are the first real test of customer confidence since attackers drained about $6.3 billion from Binance's hot wallets on Thursday in the largest crypto hack on record, leading the exchange to temporarily suspend withdrawals — the theft the FBI on Saturday attributed to North Korea's state-sponsored TraderTraitor unit, and which Binance answered by covering $6 billion of stolen cryptocurrencies with company money to buy replacement tokens, as Awaaz Punjab reported earlier today when withdrawals resumed. The pattern so far — a sharp opening spike, $3.64 billion net out the door, then easing volumes and substantial deposits, per the exchange and the trackers — is a rush that slowed, not a run that accelerated; what Monday's reserves report shows, and whether the remaining 500-plus coins reopen without a second spike, is what happens next.