Binance Outflows Top $4.72B as Hack Fallout Widens
Binance reported cumulative net outflows of $4.72 billion after reopening withdrawals on 1 November following a reported $6.3 billion security breach. The figure is about 2.8% of its reported $171 billion in assets, and Binance says withdrawals are beginning to stabilise. In the first nine and a half hours, it processed $4.649 billion in withdrawals and received about $1.01 billion in deposits, for net outflows of $3.64 billion. The later $4.72 billion figure is an updated cumulative total, not an additional withdrawal amount.
Blockchain trackers recorded more than $5 billion—and, in some estimates, over $6 billion—in outflows from Binance-labeled wallets over 24 hours. Such data can include internal transfers and does not confirm customer withdrawals. Binance says it has replenished about 95% of the affected assets. OKX and Bybit recorded net inflows of roughly $450 million and $134 million, respectively, though the data does not establish that the funds came from Binance.
The security incident has also prompted scrutiny of the stolen funds’ movement. Investigator SomaXBT said attackers moved about $242 million in assets through the Tron network. Tether froze around $378.7 million in USDT, while investigators traced transactions through cross-chain services including THORChain, Chainflip and Symbiosis. The FBI attributed the attack to North Korea’s TraderTraitor group and urged crypto services to block linked transactions. For traders, Binance outflows and the laundering investigation keep exchange security and confidence in focus, although wallet-flow data alone is not proof of a continuing customer exodus.
Bearish
The overall signal is bearish for BNB in the short term, although the reports do not establish a direct price move. Large reported Binance outflows after a major security incident can weaken confidence in the exchange and prompt traders to reduce exposure or move assets off-platform. That may add selling pressure to BNB if concerns spread to Binance’s broader ecosystem. The separately reported inflows at OKX and Bybit could indicate a shift in venue preference, but they do not prove that funds came from Binance.
There are mitigating factors: Binance says withdrawals are stabilising and that it has replenished about 95% of affected assets. In addition, wallet-tracking figures may include internal transfers, so they should not be treated as verified customer withdrawals. Tether’s freeze and the FBI’s public attribution may help contain some stolen funds, but the cross-chain movement highlights continuing security risks. Over the longer term, the effect on BNB will depend on whether Binance demonstrates effective recovery, maintains user confidence and avoids further security or regulatory setbacks. Traders should distinguish verified exchange flows from on-chain labels and monitor BNB price action, liquidity and subsequent updates before treating the outflows as a sustained trend.