A developing incident, with an important service clarification
Binance’s October 30 security notice estimates the incident’s total impact at about $6.3 billion and says withdrawals are temporarily suspended. The notice was updated to clarify that deposits remain unaffected and operate normally. Reuters also reported the breach and withdrawal pause on October 30. Checked again November 1, a fourth notice now sets a phased restart. Company notices are not a live account-status service. Earlier reports describing both deposits and withdrawals as suspended should be read alongside the newer clarification.
Impact, frozen assets and compensation are different figures
Binance says roughly $3 billion in affected assets have been frozen on-chain with partners, and that it will cover losses using its SAFU fund and company funds. A freeze is not the same as money already returned to an individual account. Nor does an estimated incident-wide impact establish the loss of a particular customer. Treat the impact estimate, frozen-asset total and compensation commitment as separate statements; subtracting two headline figures does not by itself produce a verified account of recoveries or outstanding customer payments.
The technical explanation is still preliminary
Binance’s initial account pointed to a potentially compromised DevOps laptop and unauthorised withdrawal transactions. Its second update says investigators found additional points of breach. It still reports no evidence of leaked wallet private keys and promises a technical post-mortem. Those are preliminary company findings, not a completed independent forensic report. A statement that investigators have not found evidence of one failure does not establish that every other component was unaffected. The full sequence of access, permissions and transactions remains something to assess against the eventual technical findings.
November 1: withdrawals have started reopening
Reuters now reports that bitcoin withdrawals restarted shortly after 06:00 UTC on November 1, followed by ether, BNB and some USDT and USDC withdrawals. Binance’s official Chinese-language account also reports the Bitcoin reopening and the restoration of ETH, USDT and USDC on Ethereum, and BNB, USDT and USDC on BNB Smart Chain. This moves the story beyond the earlier announced 06:00–09:00 UTC restart window. It does not establish that every asset/network pair is available. We have not tested a customer transfer; consult the current official withdrawal screen and network-status page for individual availability.
Why the asset and network must both match
The same token can be supported on several networks while availability differs between them. A reopening for USDT on one chain therefore cannot establish that USDT is available on every chain. The notice also warns of temporary processing delays during rollout. Distinguish a listed pair, a currently enabled withdrawal and a completed transfer: these are three different observations. A general reopening headline compresses those stages and can leave readers with an inaccurate impression of universal access.
October 31: replacement assets and a new reserves snapshot
Binance’s third recovery update says it has replenished 90% of the stolen assets and provided a proof-of-reserves snapshot taken October 31 at 00:00 UTC. CoinDesk corroborates that the company reported an increase from about 80% in the previous update. These remain attributed company statements, not an independent audit performed by this publication. Replenishing assets means replacing the affected holdings; it does not establish that investigators recovered the original stolen tokens. A snapshot also describes holdings at a particular time. It does not, by itself, confirm that a withdrawal request can now be completed. The third update still describes restoring withdrawals as the next milestone.
November 1: reported replenishment rises to 95%
The fourth notice says Binance has now covered approximately 95% of the impacted amount, compared with 90% previously. Reuters corroborates that figure. This is the company’s reported replacement of affected assets, not proof that 95% of the original stolen tokens have been recovered. We have not independently audited the reserves. The change in replenishment and the withdrawal rollout answer separate questions: backing holdings does not itself demonstrate that every service is operational.
What this report can and cannot establish
The immediate public questions are whether withdrawals have resumed, how much affected value is actually recovered and what the final investigation establishes. A new statement can answer one question while leaving the others open. This publication has not inspected customer accounts or independently traced the affected assets. The article explains the reported incident; it does not recommend buying, selling or depositing cryptocurrency, or guarantee compensation outcomes. Its Bitcoin-token photograph is a symbolic file image, not evidence of stolen assets or a Binance wallet.
Sources & further reading
- Reuters via Fidelity: withdrawals restarted on November 1
- Binance official Chinese-language account: asset/network restoration updates
- Binance: November 1 fourth update and asset/network rollout
- Reuters via Euronext: November 1 phased restart and 95% replacement
- Binance: October 31 third recovery update and reserves snapshot
- CoinDesk: October 31 replenishment reporting
- Binance: second security update, reserves and phased restart target
- Binance: security incident notice and deposit clarification
- Reuters via Euronext: October 30 breach and service reporting