Binance Hack 2026: Which Withdrawals Have Resumed?

By Hyun Lee · Network status checked November 6, 2026, at 14:37 UTC

Binance has resumed withdrawals on some routes, but the November 6 announcement is not an all-clear. At our check, AXL withdrawals showed as normal on BNB Smart Chain, while Arbitrum One showed a low hot-wallet balance. PENDLE showed as normal on both networks. Check the exact asset and network, not just the coin name or the date in the announcement.

CoinPop illustration: one asset can have multiple withdrawal routes.

Binance withdrawal status by asset and network

Recovery Update #9 scheduled a phased rollout starting November 6 at 04:00 UTC. It did not give each route its own opening time. We compared that schedule with the withdrawal column of Binance’s public network status page. The table covers examples across all nine networks in Update #9, plus three routes from the November 1 phase in Update #4.

In a separate November 6 update, Binance said it was targeting the end of the following week for withdrawals of HYPE, INJ, APT, PLASMA, NEAR and LTC, and for remaining assets on already-restored networks. That is a target, not a confirmation that those routes are open.

AssetWithdrawal networkAnnounced rollout (UTC)Withdrawal status at 14:37 UTC, Nov 6
BTCBitcoinNov 1, #4Normal
ETHEthereumNov 1, #4Normal
XRPXRP LedgerNov 1, #4Normal
PENDLEArbitrum OneNov 6, #9Normal
PENDLEBNB Smart ChainNov 6, #9Normal
XRPEthereumNov 6, #9Normal
ETHOptimismListed in #4 and again in #9Normal
ZROArbitrum OneNov 6, #9Normal
ZROBaseNov 6, #9Normal
ZROOptimismNov 6, #9Normal
ZROBNB Smart ChainNov 6, #9Normal
ZROPolygon PoSNov 6, #9Normal
ZROAvalanche C-ChainNov 6, #9Normal
AXLArbitrum OneNov 6, #9Not open — low hot-wallet balance
AXLBaseNov 6, #9Not open — low hot-wallet balance
AXLBNB Smart ChainNov 6, #9Normal
AXLOptimismNov 6, #9Not open — low hot-wallet balance
AXLPolygon PoSNov 6, #9Not open — low hot-wallet balance
AXLAvalanche C-ChainNov 6, #9Not open — low hot-wallet balance
U (United Stables)EthereumNov 6, #9Normal
U (United Stables)TronNov 6, #9Not open — token marked unsupported
FDUSDSuiNov 6, #9Not open — wallet congestion

“Normal” is what Binance’s public withdrawal column showed, not proof that a transfer was sent or received. We did not initiate a withdrawal or check account-specific eligibility. For unlisted routes, check the live status page; this sample does not establish whether they are open or closed.

How to check your route now

Binance public status page with the PENDLE search field and the arrow to expand the asset row marked 1 and 2.
1–2. Search for the asset, then select the arrow at the far right of its row. View full size.
Expanded PENDLE row with the Withdrawal Status column highlighted beside Arbitrum One, BNB Smart Chain and Ethereum.
3. Match your network to the Withdrawal Status column, not the Deposit Status column. View full size.

Both screenshots of Binance’s public status page were taken on November 6, 2026, at 11:52 UTC, before the table’s 14:37 UTC check. CoinPop added the numbered callouts. The screenshots show where to look, not live availability. Use the live status page to check your route now.

  1. Open the official network status page, search for the asset and expand its row. Read Withdrawal Status for the specific network. A normal deposit status does not mean withdrawals are available.
  2. In your own account, confirm that the same network is selectable on the withdrawal screen. A route that shows as normal publicly may still be unavailable to your account. Check the destination’s supported network and any required memo or tag separately.
  3. If the route is unavailable, recheck its status rather than choosing a similarly named network. U is not USDT, and XRP on Ethereum is not XRP on XRP Ledger.

What happened in the Binance hack?

In its October 30 incident update, Binance reported that hot wallets were compromised on October 29 and estimated the loss at about US$6.3 billion. The FBI attributed the theft to North Korea’s TraderTraitor actors. Binance announced a first reopening phase for November 1 and expanded the rollout in later updates, including the November 6 notice above.

Frozen funds, asset replenishment and Proof of Reserves are different

MeasureReported figure or scopeWhat it does not show
Stolen funds frozenChainalysis reported about US$2.8 billion frozen as of 11:30 a.m. ET on November 3.A freeze restricts movement; it is not evidence that the funds were returned to Binance or customers.
Affected assets replenishedBinance Update #7 reported replacing about 98% of the impacted amount as of November 4, with purchases of remaining tokens still under way.This is Binance’s report of replacement assets, not the percentage retrieved from the attacker or the percentage of withdrawal routes reopened.
Proof of Reserves (PoR)Binance said its November 4, 00:00 UTC reserve snapshot covered 44 tokens, up from 10 in the previous snapshot.A snapshot addresses backing for assets in scope at that time. It is not a full solvency audit, proof that stolen funds were recovered, or a check of today’s withdrawal routes.

The November 4 snapshot and its cryptographic proof are separate. Update #7 said the proof was still being generated when the snapshot was announced. On November 6, Binance reported that the proof for its latest snapshot was ready. That is the exchange’s announcement; we did not independently run the proof verification. Check the date on the specific report before relying on it.