Binance just covered 90% of a $6.3B hot-wallet heist — withdrawals are moving again
Thursday’s number still sounds fake when you say it out loud. Roughly $6.3 billion walked out of Binance hot wallets — the fattest exchange breach on record — and by the weekend the story had already shifted from “is this real?” to “can they reopen the doors without breaking the tape?”
On October 31, the exchange said it had replenished about 90% of the stolen balances by buying tokens with company money. Not recovered from the attacker. Replaced. Drawn from corporate treasury, a slice of the Secure Asset Fund for Users (SAFU), and part of the futures insurance pool — more than $6.34 billion earmarked so customers wouldn’t eat the hole. The FBI later tied the job to North Korea. That changes the geopolitical footnote. It does not change the desk question: when do withdrawals work again, and which tickers are actually whole?
What’s covered — and what isn’t
Binance’s own cut said the big pipes are fully backed 100%: BTC, ETH, USDT, BNB, SOL, USDC, XRP, USD1, RLUSD, and ZEC. The remaining ~10% is the long tail — thinner books that take longer to source on markets and OTC desks. That’s the honest part of the update. Liquidity is not a slogan. It’s whether you can buy enough of a mid-cap without becoming the candle.
By Sunday, November 1, withdrawals started returning in phases: bitcoin network first, then Ethereum and BNB Smart Chain. A proof-of-reserves snapshot was taken as of 00:00 UTC October 31, with cryptographic verification promised in the next few days. Marketing says users won’t bear the loss. The market hears something narrower: can you move size off the platform without a surprise halt?
Price barely threw a parade. Bitcoin spent the weekend neighborhood grinding the high $77ks. Ether held near $2,250. Solana slipped. The shock selling mostly landed on the day of the breach; the replenishment headlines bought calm, not a melt-up.
The Early-Stage read
Exchange risk is not abstract for anyone watching fresh CAs. Launchpad mints settle into books that still lean on CEX depth for the first real exit. When the largest venue freezes withdrawals, every “I’ll arb it on Binance” plan becomes a screenshot.
Three tells worth keeping on the board:
- Whether phase-one withdrawals stay open through a normal Monday — a Sunday reopen that sticks is different from a Sunday reopen that hiccups.
- Whether the last 10% gets closed without another “please wait” post — illiquid tops-ups are where narratives rot.
- Whether smaller venues and bridges pick up forced flow while trust digests — that’s often where early-stage liquidity gets weird first.
A covered hack is still a hack. The useful habit is the same as always: treat the SAFU press note as balance-sheet weather, then check whether the rails your tokens actually need — deposit, withdraw, convert — are boring again. Boring is the bullish outcome here.