Jonathan Ramos 🔶

Binance began restoring withdrawals in phases at 06:00 UTC on November 1, 2026. By 12:36 UTC, withdrawals had resumed for all 15 networks and assets in the initial phase. After an initial spike, withdrawal volumes have declined and are stabilising as expected, while deposit volumes have remained substantial. Between 06:00 and 15:30 UTC on November 1, we processed $4.649 billion in withdrawals and $1.01 billion in deposits, resulting in a net outflow of approximately $3.64 billion. This represents 2.1% of our $171 billion in total assets under management (AUM), based on the latest available Proof of Reserves (PoR) data as of October 28, 2026. A new PoR snapshot was taken at 00:00 UTC on October 31, and zero-knowledge proof (ZKP) computation began. The updated report is expected to be available on our PoR website tomorrow. Our team continues testing rigorously the remaining networks and assets. We know how important safe and reliable access to your funds is and will share details of the next phase as soon as we can. Rest assured that market conditions are stable. Thank you for your patience and continued support.

Latest Withdrawal Update Withdrawals have now been re-enabled for the following networks and assets: ✅ BTC: BTC ✅ ETH: ETH, USDT, USDC ✅ BSC: BNB, USDT, USDC ✅ XRP: XRP ✅ Base: ETH, USDC We will continue to restore additional assets and networks in phases as security checks are completed. Further updates will be shared through official Binance channels.

Withdrawal Update Withdrawals have now been restored for the following assets and networks: - Ethereum Network: USDC, USDT, ETH - BNB Smart Chain (BSC): USDC, USDT, BNB We will continue to restore additional assets and networks in phases following the completion of our security checks. Further updates will be shared through official Binance channels.

The FBI is releasing information advising the Democratic People's Republic of Korea (North Korea) was responsible for the theft of more than $6 billion USD in virtual assets from cryptocurrency exchange, Binance, on or about October 29, 2026. The FBI refers to this specific North Korean malicious cyber activity as "TraderTraitor." The FBI, together with partners at the USSS and IRS-CI, has observed TraderTraitor actors converting stolen assets primarily into Ethereum (ETH). It is expected these assets will then be further laundered by converting them using DeFi and instant swap services as they prepare them for further laundering stages. How You Can Help: FBI, USSS, and IRS-CI are urging private sector entities including THORNode operators, RPC node operators, instant exchanges, DeFi services, blockchain analytics firms, and other virtual asset service providers to block transactions with or derived from addresses TraderTraitor actors are using to launder these stolen assets. A list of addresses associated with this activity is available here: fbi.gov/investigate/cyber/al…

Binance has begun recovering affected assets for users and continues to work with law enforcement, issuers, blockchain intelligence firms and industry partners to trace, freeze and recover additional funds. The company has already publicly committed to cover losses through company funds in the prior announcement. Binance has already reserved over $6.34B of company funds to cover this incident. $5B of these funds are already held in the exact token assets that were impacted. We are completing the purchase of the remaining amount by buying token assets through market channels and OTC channels. We are doing this to match the format of the remaining token assets and address any asset shortfalls. This step can take longer because some tokens may have low liquidity and OTC settlement also takes time. We will share more progress as soon as we can. These figures do not include frozen or protected assets, which remain subject to ongoing recovery and verification. Currently, $3bn has been frozen, with thanks to our industry partners. We are working with partners and law enforcement to recover the frozen assets.We will continue to use company resources to cover confirmed shortfall and will provide further verified updates as recovery efforts progress. Ultimately, all user funds will be verified publicly through our Proof of Reserves. We will weather this storm. Thank you for the support.

Official Statement Regarding Recent News on Binance Security Incident In light of recent news regarding a cybersecurity incident involving Binance, Gulf Binance Co., Ltd. would like to confirm that customer digital assets on Binance TH remain completely safe. The Cold Wallets of Binance TH are strictly segregated from those of Binance, as Binance TH operates as an independent legal entity with its own dedicated digital asset custody system. As a proactive precautionary measure, we would like to inform you that digital asset deposits and withdrawals are temporarily suspended while our expert team conducts a thorough security check. All other services on the platform continue to operate as normal, and we will resume deposit and withdrawal operations as soon as the verification process is completed. The security of our customers' digital assets remains our highest priority. We remain fully committed to maintaining strict security standards to ensure absolute confidence among all our clients. We sincerely apologize for any inconvenience caused.

Thank you for the collective support from the community.💛 We are currently conducting a security scan to ensure the safety of funds within the platform. 🙏 User funds SAFU.

在本次币安被盗的事件中其实受影响的用户并不多（甚至都没有任何的恐慌情绪），虽然这次被盗的金额可能是有史以来最大的，但在我熟悉的群体中甚至没有人担心自己在币安的资金安全问题，这就是行业龙头给大家的信心！ 没有一帆风顺的船，水花只能激起阵阵涟漪，影响不了船的轨迹！ @heyibinance

Ripple is closely monitoring reports of a potential exploit involving Binance and its attackers’ RLUSD holdings and we are actively freezing affected funds. We’re coordinating with relevant parties and stand ready to support any investigation and appropriate action to keep users protected.

BREAKING: Arbitrum Security Council has executed a transaction to freeze ~$30.5M from the Binance Exploit. Thanks to all other signers involved. Exploiter address 0x3E2bf1ac6bf0934BBba6456C341c2EcbCED632d5 Trsanction hash: 0xb69c81774f507d46ce776aeaed8b4d31df96dd66ce6fd05073481011835355d6