Key Takeaways
- Binance swung back to positive 24-hour net inflows after post-hack outflows topped $7 billion daily.
- Weekly net outflows still stand near $12 billion, showing confidence has not fully recovered.
- Sustained deposits after withdrawals normalize will reveal whether Binance has truly stabilized.
Binance Users Return as 24-Hour Inflows Swing Positive
Money is starting to flow back into Binance after one of the largest security shocks in crypto history.
Binance recorded about $3.25 billion in 24-hour net inflows according to Defillama data, as of this writing, reversing the heavy withdrawals that followed the Oct. 29 hack. The exchange’s tracked onchain assets stood at roughly $128.8 billion.
“By 03:00 UTC [Nov 3], we are seeing hourly deposits exceed withdrawals,” Binance said earlier Tuesday, describing the shift as a sign of stabilizing user activity.
$12 Billion Weekly Drain Shows Trust Is Not Fully Restored
One positive day does not erase the damage.
Defillama still showed approximately $12.16 billion in seven-day net outflows and $10.85 billion over 30 days. The rolling figures can change quickly as large transfers enter and leave the measurement window.
Binance’s own shorter-term data earlier Tuesday showed $10.97 billion in withdrawals against $5.70 billion in deposits during the first 46 hours after withdrawals began reopening, leaving a $5.28 billion deficit over that period.
Co-founder and former CEO Changpeng Zhao said only a small share of withdrawals appeared to move to rival centralized exchanges (CEXs). He wrote on X:
According to public reports, only 6-10% of withdrawals went to other CEX. Majority went to self-custody wallets, and have not interacted with a DEX yet. Stay safe.
Yi He Details North Korea-Linked Threat Attempts
Binance paused withdrawals for security checks after the breach before reopening them in phases and expanding support to more assets. Co-founder Yi He said the incident came against a persistent backdrop of attempted state-sponsored attacks.
“Throughout 2026, Binance’s security team detected and prevented 57 suspected North Korea-linked cyber threat cases,” Yi He wrote on X.
She said the tactics included fraudulent job interviews, malicious developer tools, compromised software packages, browser extensions, fake video-conferencing apps, and social-engineering campaigns designed to steal credentials or deploy remote-access malware.
“We intercepted many of them, but the cost of failing to stop even one was severe, and this should never have happened,” she said.
U.S. officials have linked the Oct. 29 attack to a North Korean group, an accusation Pyongyang has denied. Kim Yo Jong has separately questioned the U.S. attribution and pointed to Washington’s policy of confiscating stolen bitcoin.
Positive Inflows Become Binance’s First Confidence Test
Binance said it covered customer losses with its own resources and resumed withdrawals after security checks. Co-CEO Richard Teng said the exchange was beginning to see “more positive inflows,” while the return of deposits provides the first measurable sign that immediate panic may be fading.
Still, the weekly figures argue for caution.
For Binance, the next test is not whether deposits can exceed withdrawals for several hours. It is whether users continue returning once services fully normalize and the initial shock disappears.
After billions rushed out, sustained positive flows would offer much stronger evidence that confidence in the world’s largest crypto exchange is actually being rebuilt.
