

The Binance withdrawal suspension followed a security incident on October 29, 2026. Binance temporarily suspended cryptocurrency withdrawals for security checks and announced phased restoration beginning November 1. For exchange users monitoring access to their assets, this reference covers the reported timeline, withdrawal status, affected networks, frozen funds, and recovery measures. Last Verified: November 2, 2026
Binance temporarily suspended withdrawals following a security incident involving an estimated $6.3 billion in assets.
Approximately $3 billion in affected assets was reportedly frozen through recovery efforts.
Binance pledged to absorb losses through its Secure Asset Fund for Users (SAFU) and company reserves.
Withdrawal services began phased restoration on November 1, subject to security checks and network availability.
| Date | Event | Reported Status |
|---|---|---|
| October 29, 2026 | Security incident detected | Unauthorized activity involving cryptocurrency assets |
| October 30 | Withdrawal suspension announced | Withdrawals temporarily halted for security checks |
| October 30 | Asset recovery efforts | Approximately $3 billion reportedly frozen |
| October 30 | Fund protection announcement | Binance pledged to cover losses using SAFU and company funds |
| November 1 | Phase-one recovery begins | Withdrawal services progressively restored |
| November 1 | Recovery update | Approximately 95% of impacted assets reportedly covered or replenished |
| November 2 | Latest reported status | Phased reopening announced; individual network availability requires confirmation |
Source: Binance security incident and withdrawal recovery announcements dated October 30–November 1, 2026. The figures are company-reported and subject to further verification.
Binance, one of the world's largest cryptocurrency exchanges, suspended withdrawal services as a precaution after detecting unauthorized activity involving cryptocurrency assets.
The company's initial investigation reportedly identified a compromised laptop belonging to a DevOps engineer. An attacker may have used access obtained through the compromised laptop to submit unauthorized withdrawal transactions.
Binance said its team conducts security checks before restoring affected services. The investigation involved reviewing infrastructure access, compromised authorizations, transaction activity, and potential additional points of breach.
The company reported finding no evidence that wallet private keys had been compromised. That finding was preliminary, rather than proof that every possible access route had been excluded.
Although the suspension was initially expected to last no longer than 48 hours, restoration proceeded in phases.
Binance announced that cryptocurrency withdrawals would resume progressively from November 1, 2026.
The first phase prioritized major blockchain networks and widely used tokens, including Bitcoin, Ether, stablecoins, and other frequently transferred assets.
| Network | Assets Identified for Phase One |
|---|---|
| Bitcoin | BTC |
| Ethereum | ETH, USDT, USDC |
| BNB Smart Chain | BNB, USDT, USDC |
| Tron | TRX, USDT |
| Solana | SOL, USDT, USDC |
| XRP Ledger | XRP |
| Dogecoin | DOGE |
| Polygon | POL, USDT, USDC |
| Arbitrum | ETH, USDT, USDC |
| Additional networks | Avalanche, Base, Optimism, Sui, TON, Zcash |
Binance reported reopening the initial group of withdrawal networks on November 1. Other tokens and networks remained subject to security checks.
Withdrawal availability may differ by asset, network, account, and jurisdiction. A phased reopening announcement does not confirm that every withdrawal route is operational.
During the global withdrawal suspension, standard deposit services and unaffected trading functions reportedly remained available. Some regional operations imposed broader restrictions as a precaution.
Binance estimated the financial impact of the security incident at approximately $6.3 billion.
The exchange reported working with industry partners, blockchain intelligence firms, law enforcement, and stablecoin issuers to trace stolen funds and restrict transfers.
Approximately $3 billion in affected assets was reportedly frozen. Stablecoin issuer Circle was among the organizations identified in the recovery efforts.
Binance pledged to cover losses using its Secure Asset Fund for Users and company reserves. It also reported replenishing or covering approximately 95% of impacted assets by November 1.
These figures represent reported financial protection and asset recovery progress. Replenishing customer balances is not the same as recovering every stolen token.
The proof-of-reserves framework illustrates how cryptocurrency exchanges can disclose holdings against reported customer balances. Reserve snapshots, though, do not establish that withdrawals can always be completed immediately.
The investigation examined how the attacker gained access to Binance infrastructure and whether additional security weaknesses remained.
On October 31, the FBI reportedly attributed the breach to North Korean-affiliated actors associated with cryptocurrency theft operations.
The reported attack involved unauthorized withdrawals, subsequent asset movements, and attempts to transfer stolen cryptocurrency through blockchain networks.
Binance stated that user funds remain safe and pledged to bear the financial impact rather than transfer losses to customers.
After withdrawal services reopened, Binance reported approximately $4.65 billion in withdrawals and $1.01 billion in deposits during an initial reporting window.
That represented approximately $3.64 billion in net outflows. The exchange also pledged to publish a complete post-incident security report after the investigation concluded.
The FBI attribution, loss estimates, recovery figures, and withdrawal-flow statistics should be checked against original announcements before publication.
Users should check official Binance announcements and their account's withdrawal interface before making a transfer.
The main precautions are:
Confirm that withdrawals are enabled for the selected cryptocurrency and network.
Check the recipient wallet address and supported blockchain.
Review maintenance notices and security restrictions.
Avoid third-party messages requesting deposits to release frozen funds.
Retain withdrawal records and contact official support if transactions remain restricted.
A cryptocurrency withdrawal guide explains why selecting compatible sending and receiving networks matters.
Some users maintain accounts with more than one exchange to preserve alternative access to liquidity during a suspension. This introduces separate counterparty and custody risks and does not guarantee uninterrupted access.
This reference is based on reported Binance security announcements, withdrawal restoration updates, and information concerning the subsequent investigation.
The October 29–November 2 timeline distinguishes the initial incident, withdrawal restrictions, asset recovery, and phased restoration. Financial estimates and operational status may change as investigations continue.
Binance announced phased restoration of cryptocurrency withdrawals beginning November 1, 2026. Availability depends on the specific asset, blockchain network, and applicable account restrictions.
Binance stated that user funds remain safe and pledged to cover losses using SAFU and company reserves. These assurances do not eliminate the need for independent verification of the exchange's financial condition.
The initial suspension was expected to last approximately 48 hours. Phase-one withdrawal restoration began November 1, while other assets and networks required additional security checks.
Standard deposits and unaffected trading services reportedly remained available during the global withdrawal suspension. Some regional services applied additional restrictions, so users should check the relevant platform announcements.











