Binance customers pull $3.64 billion in a day as it reopens after the $6.3 billion hack

Binance said customers withdrew $4.65 billion and deposited $1.01 billion on Sunday, a net outflow of $3.64 billion, after it reopened withdrawals following last week's $6.3 billion theft, CNBC reported. The window ran from 6 a.m. to 3:30 p.m. UTC.

The number behind the number

The net outflow is 2.1% of the $171 billion in assets Binance reports. But that denominator comes from proof-of-reserves data dated Oct. 28, before the attack, so it is the share of the pre-hack balance sheet, not of what the exchange holds now. Founder Changpeng Zhao wrote on X that "98% choose to stay," and said most of the outflow came in the first couple of hours. That is a statement about assets, not about the number of customers who left.

The outside count is higher. Cointelegraph cited DefiLlama at $5.8 billion of net outflows over 24 hours, and Reuters, via the New York Post, put DefiLlama at $4.36 billion earlier in the day. A Binance spokesperson said the tracker misses flows into its own new hot wallet, so its own post is closest to accurate. We cannot settle that from outside; treat $3.64 billion as the exchange's figure and the higher numbers as an independent estimate.

What Binance and the FBI say

• Binance says it has covered about 95% of the stolen amount, up from 90%, using its $1 billion SAFU reserve, its futures insurance fund and corporate money. The remaining 5% is in less liquid tokens that will take longer to source.
• Reuters reports Binance has set aside about $6.34 billion of company funds and that it located about $3 billion of the stolen assets as of Friday, working with other firms on freezes.
• The FBI said Saturday that North Korea's TraderTraitor unit was responsible and that it expects "further laundering." Reuters reports President Trump said it remained unclear whether North Korea was involved.
• Co-CEO Richard Teng called it a "complex attack" involving a compromised laptop and malware built to erase evidence, per Reuters.
• Withdrawals are being restored in phases. The first phase covered 15 networks, including Bitcoin, Ethereum, BNB Smart Chain and XRP Ledger; testing continues on the rest.

Prices barely reacted

Coinbase's data show bitcoin near $78,300 and ether near $2,285 late Sunday, each up about 0.9% over 24 hours. Bitcoin was about 2.2% below its $80,053 open of Oct. 26 (UTC). BNB, Binance's own token, traded near $713, against a $758.84 close on Oct. 28. Most of BNB's drop came in the Oct. 29 daily candle, which Reuters' timeline (the theft began late Thursday) suggests largely preceded the attack, so we are not attributing it to the hack.

The clearer casualty was crypto equities. Coinbase shares fell 10.62% on Friday, Oct. 30 to $143.54, per Nasdaq data, and are 28.6% below their Sept. 22 high in our chart.

What to watch

Whether withdrawals keep slowing once the remaining networks reopen, whether the last 5% of replacements arrives, and what the FBI says about laundering. Our earlier coverage of exchange breaches, including Bitget's $387.5 million hack and the third-quarter hack tally, shows how large the gap is: Binance's loss is roughly 16 times Bitget's. Live prices are on our crypto board.

Sources: CNBC; Reuters via New York Post; Cointelegraph; prices from Coinbase Exchange and Nasdaq. Information, not investment advice.