Binance Restores HYPE and APT Withdrawals Early as Reserve Data Shows a $9 Billion Stablecoin Exodus
Published November 9, 2026, 8:15 AM PKT. Based on Binance's November 8 withdrawal announcement (primary source, via Bitcoin.com), CryptoQuant exchange metrics through November 8 (via Bitcoin.com), TokenPost reporting on the proof-of-reserves launch, and crypto.news.
Binance reopened withdrawals for Hyperliquid ($HYPE) and Aptos ($APT) on Sunday, November 8, 2026, five days ahead of the November 13 target the exchange set for six altcoins, while new reserve data shows how much the exchange shrank in the ten days since the October 29 hack. The exchange announced the reopening in a short post on X, saying, "Latest Withdrawal Update. Withdrawals have now been re-enabled for the following networks and assets: HYPE, APT."
The two tokens were the first of six named in Binance's November 6 commitment to restore withdrawals for Hyperliquid ($HYPE), Aptos ($APT), Injective ($INJ), Plasma ($PLASMA), NEAR Protocol ($NEAR) and Litecoin ($LTC) by the end of the following week. The other four have not been reopened yet, and Binance has given no new date for them. Each withdrawal route still has to pass its own security checks before it returns.
Two tokens back early, four still waiting
The early return is the latest step in a phased reopening that began on November 1, when Binance resumed withdrawals across 15 networks after suspending them in the wake of the theft of about $6.3 billion in digital assets. The exchange then expanded the reopening to dozens of additional assets, including tokens on Ethereum ($ETH) and Solana ($SOL), and published two further batches in its recovery updates on November 5 and November 6, covering 69 network and asset pairs and then 58 more.
Binance said on November 4 that about 98 percent of the impacted assets had been replenished with company funds, and that it had set aside more than 100 percent of the amount needed to cover the losses. The remaining 2 percent consists of less liquid tokens that the exchange is still buying through market and over-the-counter trades, with no date given for completion.
Bitcoin reserves down 56,000 coins
CryptoQuant metrics examined through November 8 put the scale of the exodus in numbers. Binance's Bitcoin ($BTC) reserves fell from about 730,000 coins before the attack to 673,700, a decline of roughly 56,000 coins, or 7.7 percent. At Bitcoin's price of about $75,800 on Sunday, that difference represents approximately $4.2 billion in holdings, according to Bitcoin.com.
The heaviest withdrawals came in the days around the reopening, when daily Bitcoin netflows registered approximately negative 14,500 coins, negative 22,000 coins, negative 16,500 coins and negative 9,000 coins. The 22,000 coin reading was the largest daily net outflow in CryptoQuant's 12 month series. The flow then turned, with one session showing positive netflows of about 10,400 coins, and the latest reading showed approximately 1,300 coins in positive daily netflows.
A second dataset tells a similar story with different totals. Arkham Intelligence placed Binance's labeled holdings at about $162.65 billion on November 8, including roughly 696,184 Bitcoin and 3.454 million Ether, exceeding CryptoQuant's estimates by about 22,500 Bitcoin and 374,000 Ether. The two firms attribute wallets differently and cover different chains, so the gap is a measurement difference, not a contradiction, and both datasets show substantial reserve reductions since the attack.
Stablecoins took the hardest hit
The largest proportional fall was in stablecoins. Binance's Ethereum-based stablecoin reserves declined from about $41 billion before the attack to $32 billion by November 8, a contraction of about $9 billion, or 22 percent. Two daily stablecoin net outflows approached $3.3 billion and $3.6 billion, roughly triple the largest comparable daily withdrawal recorded during 2026. The latest daily reading showed positive stablecoin netflows of about $27.9 million, indicating that the extraordinary withdrawal activity has moderated.
Ether reserves fell from about 3.48 million coins to 3.08 million, a reduction of 400,000 Ether, or 11.5 percent. Two daily Ether netflow readings approached negative 175,000 and negative 155,000 coins. The latest daily Ether netflow remained negative at about 5,500 coins, the one major asset still showing a daily outflow in the latest reading.
The proof-of-reserves check goes live
TokenPost reported on November 8 that Binance has launched zero-knowledge proof verification for its latest proof-of-reserves snapshot, giving users a way to check whether their own account balances have at least 1:1 reserve backing. The snapshot was taken at 00:00 UTC on November 4 and covers 44 tokens, up from 10 in the previous round. Binance had said generating the full zero-knowledge proof would take about 50 to 60 hours of computation, a window that has now passed.
Binance has not published a separate Recovery Update #10, and the proof-of-reserves launch was reported by TokenPost citing the exchange rather than announced in a new recovery update. A proof-of-reserves snapshot is a point in time check. It confirms that reserves covered customer liabilities at the moment the snapshot was taken, November 4 at 00:00 UTC, and it says nothing about solvency an hour before or after, or about debts and obligations that sit outside customer balances.
What the numbers do and do not show
Three cautions apply to the reserve figures. CryptoQuant's measurements include movements tied to the theft itself, not only customer withdrawals, so the reserve declines are not a pure measure of customers leaving. The stablecoin figures cover Ethereum-based tokens only, not every chain. And Binance's own reported figure for customer withdrawals was $3.64 billion in net outflows on November 1, between 06:00 and 15:30 UTC, equal to about 2.1 percent of its reported $171 billion in assets, a much smaller number than the reserve declines because the two measures count different things.
On the attackers' side, Elliptic reported that the hackers had converted about $174 million in stolen altcoins into another 2,300 Bitcoin, up from the $124 million converted into about 1,650 Bitcoin that the firm reported on November 6. The FBI and blockchain investigators attribute the attack to North Korea-linked hackers, and North Korea has denied involvement.
The next markers are November 13, when the remaining four tokens in the six coin group, Injective ($INJ), Plasma ($PLASMA), NEAR Protocol ($NEAR) and Litecoin ($LTC), are due to reopen, and any Recovery Update #10 from Binance confirming the proof-of-reserves verification and the status of the remaining 2 percent of replenishment. The latest flow readings suggest the immediate exodus is subsiding, but the diminished reserves show the financial consequences are still visible across the exchange.
Sources
- Binance withdrawal announcement, November 8, 2026, via Bitcoin.com, Binance Restores HYPE, APT as Data Reveals Billions in Reserve Outflows (primary source: "Latest Withdrawal Update. Withdrawals have now been re-enabled for the following networks and assets: HYPE, APT."; November 6 commitment to restore six tokens by the end of the following week; CryptoQuant metrics through November 8: Bitcoin reserves 730,000 to 673,700, Ether 3.48 million to 3.08 million, Ethereum-based stablecoins $41 billion to $32 billion; daily netflow readings; Arkham $162.65 billion snapshot; Elliptic $174 million converted into 2,300 Bitcoin)
- crypto.news, Binance restores HYPE, APT withdrawals as post-hack recovery continues, November 8, 2026 (secondary reporting: HYPE and APT restored November 8; remaining restorations depend on individual asset and network security checks; November 6 announcement targeted HYPE, APT, INJ, PLASMA, NEAR and LTC for reopening by the end of the following week)
- TokenPost, Binance Launches Zero-Knowledge Checks for 1:1 Reserve Backing, November 8, 2026 (secondary reporting: zero-knowledge proof verification launched for the latest proof-of-reserves snapshot; snapshot November 4, 00:00 UTC, 44 tokens; Binance said it would absorb losses rather than pass them to customers)
- Binance Recovery Update #7, November 4, 2026, via Binance Square (secondary source: 98 percent of impacted assets replenished; proof-of-reserves snapshot expanded from 10 to 44 tokens; full zero-knowledge proof estimated at 50 to 60 hours of computation)
- MABOnChain, Binance Targets November 13 to Reopen Withdrawals for Six Altcoins After $6.3 Billion Hack, November 7, 2026 (prior coverage: November 13 target for the six tokens; Update #9 fourth batch of 58 network and asset pairs across nine networks)
This article is news reporting and is not investment advice.
MABOnChain Daily Brief
The key crypto and markets stories in one short, plain-language email. Free. Unsubscribe any time.
Prefer chat? Join us on Telegram Watch on YouTube
Keep reading
Blumenthal Sets January 4 Deadline for Binance, Tether and Trump Crypto Firms to Hand Over Senate Records
Senator Richard Blumenthal, incoming chair of the Senate Permanent Subcommittee on Investigations, has given Binance, Tether, World Liberty Financial and Fight Fight Fight LLC until January 4, 2027 to produce records sought in Senate crypto investigations, warning that failure to comply voluntarily will leave the subcommittee to consider alternative measures. The date falls one day after the new Congress convenes, when Blumenthal is expected to gain subpoena power after the Democrats' November 3 midterm sweep.
FinCEN and the Fed Scrap the $250 Travel Rule Plan, Keeping the $3,000 Line for Crypto Transfers
FinCEN and the Federal Reserve Board withdrew a 2020 proposal that would have cut the reporting threshold for cross-border transfers from $3,000 to $250 and explicitly applied the rules to convertible virtual currency. The withdrawal notice, filed November 6, 2026 as FR Doc. 2026-22809, is scheduled for Federal Register publication on November 9, when it takes effect, leaving the $3,000 threshold in place.
Bitcoin Falls Below Strategy's Average Purchase Price of $75,451, Leaving Its 849,327 Coins Underwater
Bitcoin fell below the average price Strategy paid for its coins on November 8, 2026, trading at $74,863 on Coinbase and $74,660 on Binance in the early hours of November 9, against Strategy's $75,451 average cost on 849,327 coins bought for $64.08 billion. The position is now about $672 million below what the company paid, a week after the cushion stood near $1.8 billion, with no forced sale triggered but the next weekly filing due Monday and the October CPI report due Tuesday.
LNbits Tells All Operators to Shut Down Servers After Wave of Attacks Drains Funds
LNbits, the open-source wallet and accounts platform for the Bitcoin Lightning Network, told every server operator to stop their servers immediately on November 8, 2026, after a wave of attacks let intruders create unauthorized accounts and withdraw funds, with security patches expected within 24 to 48 hours. One operator reported 2,285,545 satoshis drained from his instance, and the project's hosted service is suspended until the fixes ship.



