Binance Opens Phase One of Its Withdrawal Restart at 06:00 UTC

Binance named an hour. The exchange said at 04:08 UTC on Sunday that phase one of its withdrawal restart would open between 06:00 and 09:00 UTC the same morning, two days after about $6.3 billion left its hot wallets. Four separate accounts carry that window and agree on it. What they do not agree on is how much of the stolen money has been replaced, or how many networks phase one actually covers. Deposits never stopped.

Two counts of the same replenishment

TokenPost, The National and CryptoTicker each put the share of affected assets already replaced at about 95%. FXDailyReport, publishing at 18:45 UTC on Saturday, carried 90%. K24 Digital, publishing at 05:32 UTC on Sunday, also carried 90%, and called it Binance's fourth recovery update, posted to X on Saturday. CryptoTicker sets out the progression behind the gap: about 80% by Friday evening, 90% on Saturday, 95% on Sunday. The figures attach to different hours. Side by side as published they do not reconcile into one current number, and this desk carries both. Ten major tokens, bitcoin, ether, USDT and BNB among them, are at full reserve coverage on the readings TokenPost and FXDailyReport give. What is left is lower-liquidity tokens outside the top ten, which the exchange says it is still buying.

How many networks open first

CryptoTicker published a table of 15 networks for phase one. It names Bitcoin, Ethereum, BNB Smart Chain, Tron, Solana, the XRP Ledger, Zcash, Dogecoin, TON, Polygon, Avalanche C-Chain, Arbitrum, Base, Optimism and Sui, with the coins enabled on each. TokenPost read the same announcement as 15 networks in the plan overall and only four in the first group: Bitcoin, Ethereum, BNB Chain and Solana, with eleven to follow. The National listed phase one as bitcoin, ether, BNB, Solana, XRP, dogecoin "and other digital assets", which fits either count. Those are different claims about one announcement and they do not reconcile. On CryptoTicker's account the networks open one at a time as security and readiness checks clear, ranked by user demand over the past week. Phase two has no date.

The status page had not caught up

At 04:45 UTC on Sunday, 37 minutes after the announcement, Binance's own network status page still showed withdrawals disabled on every Bitcoin and Ethereum network. That reading comes from CryptoTicker alone, and no other account read here checked it. It is a snapshot taken before the window opened, not evidence that the window failed.

"We aim to restore withdrawals progressively as we complete security and readiness checks," the exchange said.

Two other lines travel with that one in the reports carrying the update: "User funds remain safe" and "We did not take this decision lightly." None of the six accounts read for this piece names a Binance executive as the speaker.

Tuesday is the date that slipped

The reserve snapshot behind all of this is dated 31 October at 00:00 UTC. CryptoTicker expects the full proof-of-reserves document on Tuesday 3 November, and FXDailyReport puts it at about 3 November with 40 to 50 hours of zero-knowledge proof generation behind it. Binance's own earlier promise, made when it reserved more than $6.34 billion against the loss, was a full report by Monday 2 November. A day has gone. That document is where the question left open in the first week gets an answer or does not: whether the compromised wallets had been among the assets backing customer balances, a point raised when the exchange first put the theft at $6.3 billion. Bitcoin printed at about $77,750 on CryptoTicker's 04:45 UTC reading and $77,708 on SpendNode's the same day, two figures $42 apart on clocks that are not the same. BNB was at $705, roughly 5% under where it sat before the attack. The market has priced the restart. It has not yet watched a withdrawal clear.