Published:November 2, 2026

Binance opens crypto withdrawals in phases starting with bitcoin following $6.3 billion hack

Binance has reopened customer withdrawals in a phased process, starting with bitcoin, after suffering a record $6.3 billion exploit that froze customer access to funds. The restart of withdrawals represents a significant operational step following one of the largest breaches in crypto exchange history and will be closely watched for its effects on liquidity, market confidence and regulatory attention across the industry.

Immediate market and liquidity considerations

Resuming withdrawals in stages, with bitcoin the first asset to be made available to users, concentrates early on-chain activity in the largest cryptocurrency by market value. That approach may help manage node fees, mempool congestion and monitoring of outflows, but it also channels pressure to bitcoin liquidity providers and custody paths initially.

Phased withdrawals can temper sudden spikes in exchange outflows compared with a full-open restart, potentially limiting disorderly movement in exchange order books and spot liquidity. However, markets will likely monitor spreads, depth and volatility as customers exercise withdrawal options. Spillover effects could touch correlated crypto assets, stablecoin circulation if users convert assets before withdrawing, and derivatives markets as participants re-evaluate counterparty exposure to centralized venues.

Implications for institutions, custody and market structure

For institutional participants, an exchange restart after a major exploit raises questions about custody segmentation, proof-of-reserves transparency, and counterparty risk management. Firms that rely on exchange custody for balance-sheet efficiency or for on-ramp liquidity will reassess operational procedures and potentially increase diversification across custodians or insist on stricter attestations and independent audits.

The incident may also influence institutional appetite for crypto-linked products that depend on exchange infrastructure, including certain securities lending, lending pools and ETF-related custody arrangements. Custodians, regulated entities and issuers of exchange-traded products may face heightened demand for demonstrable segregation of client assets and robust incident response protocols.

Regulatory scrutiny, disclosure and next steps for market participants

The scale of the exploit ensures regulators will intensify scrutiny on exchange security practices, disclosures about reserves and incident reporting. Phased withdrawals will not eliminate calls for clearer, verifiable evidence of solvency and of how customer assets were protected, recovered or reimbursed. Regulators may push for standardized disclosure frameworks, expedited forensic reporting and minimum operational standards for large trading venues.

Market participants and observers will be monitoring several indicators in the near term: on-chain flows from the exchange, the pace and sequencing of further asset withdrawal phases beyond bitcoin, liquidity and spread dynamics on spot and derivatives markets, and any formal audit or proof-of-reserves release. Actions by regulators, counterparties and institutional custodians in response to the restart will also be critical to assessing longer-term impacts on exchange trust and market structure.

While the phased reopening is a key operational milestone, its broader effect on investor confidence, institutional behavior and industry rules will unfold as data on flows, disclosures and regulatory responses emerge.