Binance resumes Bitcoin withdrawals in phased recovery after record-breaking hack
Binance has resumed Bitcoin withdrawals as the first step in restoring services following a $6.3 billion hack. The exchange is reopening access gradually, prioritizing assets based on user demand and conducting security checks. Binance reported it has replenished 90% of stolen funds and expects full service restoration over time.
Binance resumed Bitcoin withdrawals on 1 November 2026, marking the first phase in restoring services after a $6.3 billion hack that occurred earlier that week. The exchange had suspended all withdrawals following the breach, which the FBI attributed to North Korean cyber operatives. In a statement posted on X, Binance confirmed that Bitcoin network withdrawals were now available as part of a staged recovery process. The company emphasized that each asset and network pair must undergo rigorous stability and security checks before being reinstated, with prioritization based on user demand observed over the prior week. Users are advised to check the withdrawal page or network status dashboard for real-time updates, though delays and congestion remain possible due to the phased rollout. Binance reported having recovered 90% of the stolen funds—up from 80% just a day earlier—though the source of these funds was not specified. The exchange had initially expected to resume withdrawals over the weekend, indicating some delay in execution despite progress.
The incident follows a pattern seen in prior major crypto breaches, such as the 2016 Mt. Gox collapse and the 2022 Poly Network hack, where recovery efforts were prolonged and trust was significantly damaged. Binance’s decision to prioritize Bitcoin withdrawals reflects both its dominance in the market and the high demand for BTC liquidity. The exchange’s ability to replenish 90% of stolen assets suggests either internal reserves,
The phased resumption of withdrawals at Binance could significantly influence user confidence across the broader cryptocurrency ecosystem. As one of the largest exchanges globally, its recovery trajectory may serve as a benchmark for how major platforms manage post-hack crises. Users who rely on liquidity and timely access to funds may experience anxiety or behavioral shifts—such as increased risk aversion or migration to alternative platforms—especially if delays persist. Financial institutions and custodians may reassess their own security protocols in response, potentially accelerating industry-wide improvements in threat detection and fund recovery mechanisms. The FBI’s attribution of the attack to North Korean actors adds geopolitical weight, raising concerns about state-sponsored cybercrime targeting decentralized finance infrastructure. A comparable precedent is the 2016 Mt. Gox incident, where prolonged recovery efforts eroded trust for years. What may follow is a broader push