Binance Reopens Withdrawals in Phases From 11 AM PKT, Starting With 15 Assets

Published November 1, 2026, 10:20 AM PKT. Based on Binance's November 1, 2026 recovery update as reported by Cointime, BBX and TokenPost (primary sources), with background from MABOnChain's October 31 and November 1 coverage of the hack recovery and the FBI attribution. The Phase One window described below was scheduled, not yet completed, at the time of publication.

Binance will resume withdrawals in phases starting Sunday, November 1, 2026, beginning with a Phase One window from 14:00 to 17:00 Beijing time, which is 06:00 to 09:00 UTC and 11:00 AM to 2:00 PM Pakistan time, according to the exchange's recovery update published November 1 and reported by Cointime, BBX and TokenPost. The announcement is the first concrete reopening schedule Binance has given since the October 29 hack that drained about $6.3 billion: earlier updates said only that withdrawals were targeted to resume on Sunday, subject to security checks, without naming a window or an asset list. Phase One covers 15 assets and networks, chosen by user demand over the past week, and each service returns only after its own security and stability checks. Deposit services were never paused by the incident and remain open, Binance said.

Phase One runs 11 AM to 2 PM PKT, in stages, not all at once

The window matters because of what it is not: it is not a single switch-on moment. Binance said the resumption will occur in phases, with specific assets and networks prioritized based on user demand data from the past week, and that other networks and assets will be restored sequentially once they are ready, according to Cointime's report of the update. TokenPost, reporting the same update, put the window at 1 a.m. to 4 a.m. Eastern Time on Sunday, which converts to the same 06:00 to 09:00 UTC span. The practical meaning for users is that availability inside the window depends on the checks for each asset and network, not on the clock alone: an asset whose checks are incomplete stays closed even while the window is open, and an asset that opens early in the window is not a signal that everything else has opened with it.

Binance also warned users to expect friction at the start. Due to high traffic initially, some users may experience withdrawal delays or failures and are advised to try again later, according to the update as reported by Cointime and BBX. That warning is consistent with the scale of the backlog: withdrawals have been paused since October 29, so the first hours of reopening concentrate days of pent-up requests into a single window. A failed or delayed withdrawal in Phase One is, on Binance's own framing, a congestion outcome, not evidence of a new incident, but users should still verify any withdrawal on the exchange's own announcements page rather than trusting social media claims that withdrawals are live, a scam pattern that typically surges around reopening windows.

The 15 assets in the first batch

The first batch, as listed in the update, is BTC, ETH, BNB, TRX, SOL, XRP, ZEC, DOGE, TON, POL, AVAX, ARB, BASE, OP and SUI, according to Cointime, BBX and TokenPost, all three carrying the same list. The list mixes the largest holdings with high-demand networks: bitcoin, ether and BNB anchor it, while BASE, ARB and OP represent the layer-2 networks that carry heavy retail withdrawal demand, and TON, POL, AVAX and SUI cover the large alternative layer-1s. Notably, the first batch is broader than the ten tokens Binance said on October 31 were already fully backed, bitcoin, ether, USDT, BNB, SOL, USDC, XRP, USD1, RLUSD and ZEC, which means Phase One includes nine names beyond that fully-backed group, TRX, DOGE, TON, POL, AVAX, ARB, BASE, OP and SUI, whose backing rests on the wider $6.34 billion company reserve rather than on a token-for-token match already declared complete. Binance has not published a per-asset reopening order inside the batch, so users cannot tell from the announcement which of the 15 opens first.

What is missing from the update is as important as what is in it. Binance gave no date or window for Phase Two, no list of which networks follow, and no statement on whether any withdrawal limits, manual review queues or enhanced checks will apply during the phased return. Stablecoins USDT and USDC, which were among the ten fully-backed tokens on October 31, do not appear by name in the first-batch list as reported, which leaves their reopening timing inside the phased plan unclear. Readers should treat those gaps as open questions for Binance's next update, not as evidence that those assets are excluded: the update says only that other networks and assets will be restored sequentially once ready.

The recovery picture behind the reopening

Phase One arrives on top of the recovery figures Binance reported on October 31, which MABOnChain covered in its article on the 90% replenishment. Binance said then that it had replenished 90% of the roughly $6.3 billion stolen, up from about 80% in the previous update, with $6.34 billion of company funds reserved to cover the incident, including $5 billion already held in the exact tokens stolen, funded from company treasury, a draw on the Secure Asset Fund for Users (SAFU) and part of the futures insurance fund. About $3 billion of the stolen assets has been frozen by industry partners including Tether and Circle, a separate pool from the replenished tokens. The remaining 10% sits in less-liquid tokens that Binance is still buying through market and over-the-counter channels, which the exchange has said can take longer because of thin liquidity and OTC settlement times.

Two verification milestones still sit ahead of the reopening, and neither is settled by Phase One. Binance published a new proof of reserves snapshot taken at midnight UTC on October 31, but the full cryptographic proof, which the exchange said takes about 40 to 50 hours to generate, is due November 3, and security firm CertiK has said it needs more information to verify the claimed $5 billion in replacement holdings. Separately, the FBI said on October 31 that North Korea's TraderTraitor group was behind the theft, the first formal US government attribution, and urged firms to block transactions linked to hundreds of published TraderTraitor addresses, as MABOnChain reported November 1. Neither the proof nor the attribution recovers stolen funds on its own, and neither changes the Phase One mechanics: the window tests whether Binance's rebuilt balances and security checks hold up when real withdrawals flow again, which is the first operational test of every figure reported so far.

This article is news reporting and is not investment advice.

Sources

• Binance, November 1, 2026 recovery update: Phase One withdrawal window and first-batch asset list (as reported by Cointime, primary source for the 14:00 to 17:00 Beijing time window, the 06:00 to 09:00 UTC conversion, the 15-asset first batch, demand-based prioritization, per-service security and stability checks, sequential restoration of other networks, open deposit services, and the warning about delays or failures under heavy traffic)
• BBX, Binance will resume withdrawals in phases starting at 2 PM, initially covering assets such as BTC, ETH, and BNB (November 1, 2026, primary source corroborating the Phase One window and the first-batch list)
• TokenPost, Binance Plans Phased Withdrawal Restart From 1 a.m. ET Sunday (November 1, 2026, primary source corroborating the window as 1 a.m. to 4 a.m. ET, the 15-asset first group, and demand-based prioritization)
• MABOnChain, Binance Says 90% of Stolen Crypto Replaced as November 3 Proof Nears (October 31, 2026, background source for the 90% replenishment figure, the $6.34 billion reserve, the ten fully-backed tokens, the SAFU draw and $1 billion restoration commitment, the $3 billion frozen by partners, and the November 3 full proof timeline)
• MABOnChain, FBI Blames North Korea for $6 Billion Binance Hack, Urges Firms to Block TraderTraitor Wallets (November 1, 2026, background source for the FBI TraderTraitor attribution and the address-blocking request)
• MABOnChain, Binance Teng Confirms EIP-7702 Role in $6.3B Hack, Targets Sunday Withdrawals and Monday Reserves (October 30, 2026, background source for the original general Sunday withdrawal target that the Phase One schedule now replaces with a dated window)