Binance's $3.64 Billion Outflow Test: What the First Day After Reopening Reveals About Crypto Exchanges
The number that answers the solvency question
When Binance began restoring withdrawals on Sunday, November 1, after Thursday's record $6.3 billion hack, the question was not whether some users would leave — it was how many, how fast, and whether the exchange could handle it. The first answer arrived within hours. Binance recorded about $3.64 billion in net outflows in the first nine and a half hours after reopening, the exchange said on X, processing $4.65 billion in withdrawals against $1.01 billion in deposits between 1 a.m. and 10:30 a.m. Eastern. The exchange put that net outflow at 2.1% of its $171 billion in assets under management, based on its latest proof-of-reserves data from October 28, and said withdrawal volumes had eased after an initial spike. A separate tracker, DefiLlama, counted $4.05 billion in net outflows over 24 hours as of 11:37 a.m. Eastern, against $131.1 billion in assets it tracks across Binance wallets. Two different measurements, one message: a very large, orderly exit — roughly 2% of assets, not a run that threatened the exchange's ability to pay.
Where the money went
The flows also show where departing funds went, and where they did not. The next 10 largest exchanges tracked by DefiLlama took in about $368 million combined over the same 24 hours, led by OKX at $316.8 million — while Bitfinex and Gate posted net outflows of $106.3 million and $34.5 million respectively. On-chain balances tell the same story in Bitcoin terms: Binance's Bitcoin balance fell by about 19,289 BTC over 24 hours, according to CoinGlass, while Coinbase's rose by about 984 BTC and Kraken's by about 1,422 BTC. In other words, some users rotated to rival venues rather than exiting crypto altogether, and the biggest beneficiaries were the largest regulated exchanges. That rotation, not a collapse in confidence in crypto itself, is the story of the weekend's flows — though it is worth noting the exchange said withdrawals were still suspended for 531 of its 552 listed coins as of 11:22 a.m. Eastern, with 14 others including Bitcoin and Ether only partly restored, and remaining networks including Cardano, Chainlink, Hyperliquid, Litecoin and NEAR still being tested. The reopening is phased, not finished.
The industry's security reset
The hack is also forcing a wider response across exchanges. According to a Reuters report, Coinbase adjusted the systems it uses to store cryptocurrency keys offline as a precaution, while Kraken said its teams were reviewing potential vulnerabilities for lessons. OKX chief executive Star Xu proposed a real-time alert system that would let exchanges warn one another about a suspected hack, coordinate a response and temporarily freeze suspicious funds. The freeze figures show why coordination matters: Tether said it froze nearly $1.57 billion linked to the attack, while Circle froze about $800 million connected to suspected laundering flows. The FBI attributed the theft on Saturday to North Korea's TraderTraitor group, which it said has most recently been converting stolen assets mostly into Ether, and urged exchanges, node operators and DeFi services to block transactions tied to the group's addresses. Binance itself said on Saturday it had replenished 90% of the stolen assets, after saying on Friday it had readied $6.34 billion to cover losses, and projected an updated proof-of-reserves report — based on an October 31 snapshot and computed with zero-knowledge proofs — for Monday.
What it means for exchange users
For ordinary users, the weekend offers three practical lessons. First, an exchange can survive a record hack and a multi-billion-dollar outflow day in the same week — but only if it holds the assets to cover losses, which is why proof of reserves and the speed of replenishment matter more than reassuring statements. Second, phased reopenings are normal after an incident of this size; a coin still suspended on Sunday is not necessarily a sign of trouble, though it is a reason to check the exchange's status page rather than social media rumours. Third, the security response is now industry-wide: offline key-storage changes at Coinbase, vulnerability reviews at Kraken, and a proposed shared alert system at OKX all point to exchanges treating this as a sector problem, not one company's bad week. The market's own verdict was visible on Friday, when crypto-linked stocks fell sharply — Coinbase down more than 13%, Circle more than 9% and Strategy about 8% — a reminder that exchange risk now moves listed equities too.
What to watch next
Three things decide the next chapter. First, Monday's updated proof-of-reserves report, and whether it confirms the 2.1% outflow figure against a fresh snapshot. Second, whether the remaining suspended networks reopen on schedule or slip, and whether withdrawal volumes keep easing. Third, whether the proposed real-time alert system between exchanges becomes real infrastructure or stays a post-crisis proposal. For readers in Pakistan, India and Bangladesh, the practical takeaway is simple: keep most funds in a wallet you control, use exchanges for trading rather than storage, and judge any exchange by its reserves reporting and its incident record — not by its size alone.
FAQ
How much left Binance on reopening day? About $3.64 billion net in the first 9.5 hours ($4.65 billion withdrawn, $1.01 billion deposited), per Binance; DefiLlama counted $4.05 billion net over 24 hours.
What share of Binance's assets was that? About 2.1% of $171 billion in assets under management, per Binance's October 28 proof-of-reserves data.
Where did the money go? Rival exchanges took in about $368 million combined, led by OKX at $316.8 million; Coinbase and Kraken Bitcoin balances rose while Binance's fell about 19,289 BTC.
How much of the hack has Binance covered? 90% replenished as of Saturday, per co-CEO Richard Teng, with $6.34 billion readied on Friday to cover losses.
What did other exchanges do? Coinbase adjusted offline key-storage systems, Kraken reviewed vulnerabilities, and OKX proposed a shared real-time hack-alert system; Tether froze about $1.57 billion and Circle about $800 million linked to the attack.
Read more on Zimbuck: https://zimbuck.com/pages/zimbucknews and join the discussion at https://zimbuck.com/groups/zimbuckmarketnews . Related reading on the site: the Binance replenishment coverage in the Crypto Security category.
This article is market news and general information only, not financial advice.
