Alpha

<img width="1920" height="1440" src="https://financefeeds.com/wp-content/uploads/2026/10/binance-hack-statement-edited.jpg" alt="Binance-branded T-shirt and tote bag" title="Binance Halts Withdrawals After Suspected Hack, Says Funds 'Remain Safe' 42">
Update: Binance Withdrawals to Resume Within 48 Hours, Deposits Back to Normal. <a href="https://financefeeds.com/binance-withdrawals-resume-48-hours/" rel="noopener noreferrer nofollow">Read the latest on the Binance hack</a>.
Update: Binance Hack Hits $6.3B, Traced to a Hacked DevOps Engineer’s Laptop. <a href="https://financefeeds.com/binance-hack-6-3-billion-devops-laptop/" rel="noopener noreferrer nofollow">Read the latest on the Binance hack</a>.
Update: Binance Freezes $3B as Recovery Races Toward the Hack Total. <a href="https://financefeeds.com/binance-hack-3-billion-frozen/" rel="noopener noreferrer nofollow">Read the latest on the Binance hack</a>.
Update: Binance Will Cover All Hack Losses, Suspends All Deposits and Withdrawals. <a href="https://financefeeds.com/binance-will-cover-all-losses-hack/" rel="noopener noreferrer nofollow">Read the latest on the Binance hack</a>.
Binance has paused withdrawals following the suspected Binance hack that drained billions of dollars from its hot wallets. The exchange said in an <a href="https://x.com/binance/status/2115930656589119995" rel="noopener noreferrer nofollow">official post on X</a> at 22:15 UTC on 29 October that they will resume only "as soon as the security issue is fully resolved." The wording matters: an hour earlier Binance was investigating "reports of a potential security issue." It now refers to "the security issue" as a fact, though it still has not used the word hack.
The full post reads: "Our team is conducting security checks. Withdrawals will resume as soon as the security issue is fully resolved. User funds remain safe. We'll keep you updated. Thank you for your patience."
<img src="https://financefeeds.com/wp-content/uploads/2026/10/binance-withdrawals-paused-official-post.jpg" alt="Official Binance post on X saying withdrawals will resume once the security issue is resolved">
<h2 id="from-potential-to-the-security-issue">From "Potential" to "the Security Issue"</h2>
This is Binance's third public position in an hour. As FinanceFeeds reported, the exchange <a href="https://financefeeds.com/binance-hack-statement-edited-user-funds-safe/" rel="noopener noreferrer nofollow">rewrote its first statement twice in 13 minutes</a>. Its 21:16 UTC wording that it had "not confirmed any impact to user funds" became "User funds are completely safe" by 21:29 UTC. The withdrawal post keeps the reassurance, now as "User funds remain safe," but it drops the hedge about whether an incident happened at all.
Binance spokesperson Ross O'Leary went further in comments to <a href="https://techcrunch.com/2026/10/29/binance-pauses-withdrawals-as-hackers-suspected-of-stealing-billions-in-crypto/" rel="noopener noreferrer nofollow">TechCrunch</a>, saying the exchange has "temporarily suspended withdrawals on multiple networks following a security incident as a precautionary measure." That is the closest Binance has come to confirming a breach. It has not named the affected networks or given a resumption time. At 23:06 UTC Binance <a href="https://x.com/binance/status/2115943482204574108" rel="noopener noreferrer nofollow">widened the restrictions</a>, saying Binance Alpha trading "has been temporarily suspended" and "will resume once the security issue is resolved." It has not given a loss figure or said whether the <a href="https://financefeeds.com/binances-safu-fund/" rel="noopener noreferrer nofollow">SAFU emergency fund</a> will cover any shortfall. Founder Changpeng Zhao, who no longer runs the exchange, <a href="https://x.com/cz_binance/status/2115915423174853077" rel="noopener noreferrer nofollow">wrote earlier</a> that "as a shareholder, I expect all user funds will be fully covered."
<h2 id="locked-in-still-getting-liquidated">Locked In, Still Getting Liquidated</h2>
The pause lands on traders who are already taking losses. Coinglass data cited by <a href="https://beincrypto.com/crypto-liquidations-binance-hack-fears/" rel="noopener noreferrer nofollow">BeInCrypto</a> shows $627.7 million in crypto liquidations in a single hour late Thursday, $606.6 million of it in long positions. Binance itself accounted for $344.8 million of that, more than half the total, ahead of Hyperliquid at $97 million and Bybit at $77.3 million.
Put those numbers next to the withdrawal pause and the problem for leveraged clients is clear. The biggest single block of forced selling happened on the venue whose customers now cannot move coins off it. BNB was at $702.97 at 22:24 UTC, down 6.9% in 24 hours, while Bitcoin traded near $78,840, according to <a href="https://www.coingecko.com/en/coins/bnb" rel="noopener noreferrer nofollow">CoinGecko</a>.
<h2 id="why-the-pause-is-a-different-signal">Why the Pause Is a Different Signal</h2>
Exchanges usually halt withdrawals after a breach to stop an attacker draining more wallets with the same access. In this case the drain did not need a fresh signature every time. <a href="https://financefeeds.com/binance-hack-3-3b-hot-wallets-drained-tether-circle-freeze/" rel="noopener noreferrer nofollow">On-chain data shows</a> a Tornado Cash-funded address switched a Binance hot wallet to run its own contract through an EIP-7702 delegation. That kind of access can persist until it is revoked, so a pause while Binance rotates keys and clears delegations is defensive, not necessarily a sign of insolvency.
The contrast with Bybit is still stark. After its $1.5 billion breach in February 2025, Bybit kept withdrawals open and processed the rush, and that became its main credibility argument. Binance has chosen the opposite path, at least for now, while estimates of the total outflow keep rising. Tether CEO Paolo Ardoino <a href="https://x.com/paoloardoino/status/2115918000373346709" rel="noopener noreferrer nofollow">said</a> Tether froze "more than 1.567B USDT," and Circle says it froze more than 800 million USDC, so about $2.4 billion is now locked.
<h2 id="what-to-watch">What to Watch</h2>
Three things will decide how the market reads the next update: a resumption time, a confirmed loss figure and a funding source, whether that is SAFU, the balance sheet or both. A restart within hours, published with reserve data, would echo the playbook Bybit used after its breach, even though Bybit has <a href="https://financefeeds.com/bybit-has-recovered-48-4-million-from-its-1-5-billion-lazarus-hack/" rel="noopener noreferrer nofollow">recovered only $48.4 million</a> of the stolen funds since. A pause that stretches into Asian trading hours without numbers would turn a security incident into a confidence test. For institutional clients, the question becomes <a href="https://financefeeds.com/crypto-exchange-insurance-and-solvency/" rel="noopener noreferrer nofollow">what an exchange actually guarantees</a>.
No government agency or regulator has commented publicly. Circle CEO Jeremy Allaire said the company froze USDC "in coordination with law enforcement." FinanceFeeds will update this coverage when Binance or an official authority publishes verified information.

Binance Halts Withdrawals After Suspected Hack, Says Funds…

Table of Contents

FinanceFeeds

Other articles published on Oct 29, 2026

Join our free newsletter for daily crypto updates!