Binance pauses withdrawals for security checks after reported wallet outflows
Binance says withdrawals will resume once its security issue is resolved and states user funds are safe. The investigation followed reported wallet outflows. Root cause, any stolen-fund total and a restoration time remain unconfirmed.
- Disclosed
- Oct 29, 2026
- Public disclosure date
- Severity
- Sharted
- No CVE: a breach, not a bug
- Splash zone
- Binance.com withdrawals awaiting security checks; affected assets and attack prerequisites remain unconfirmed
- crypto
- In the wild
- Unknown
- Binance confirms security checks and pending withdrawals, but not the suspected theft.
What happened
Binance’s initial notice said it had not confirmed an impact on user funds. The exchange then edited that notice to state that user funds are safe, and subsequently said withdrawals would resume after the security issue is fully resolved. These are the vendor’s statements, not an independently audited reserve or loss assessment. No resumption time or technical containment report is supplied. The withdrawal notice does not specify affected networks or withdrawal routes; do not infer that every Binance product is affected. L3 reflects the acknowledged security investigation and withdrawal disruption at a mainstream exchange; the notices do not establish a confirmed theft for L4.
CZ separately suspects a hack and says he expects users to be covered, while explicitly stating that he no longer manages Binance.com. His expectation is not a formal reimbursement guarantee from the exchange. Reported stablecoin freezes must not be counted as refunds or added to outflow estimates to calculate a loss. Circulating monetary estimates are unverified here; no independently reconciled stolen-fund total or victim count is established.
The root cause, affected wallet scope, initial access and containment status remain unresolved. We have not independently traced the transactions or authenticated wallet ownership. The cited sources do not establish a link to the separate Polymarket/DebugBear incident, or a Binance root cause of frontend injection or private-key theft. Ordinary account-security measures are useful against account abuse, but cannot establish that exchange custody systems are safe.
Crime-scene timeline
Oct 29, 2026
Binance acknowledges an investigation; CZ separately suspects a hack
The earlier exchange notice says user-fund impact is not confirmed. CZ reports stablecoin freezes and expects coverage, noting he no longer manages Binance.com.
Oct 29, 2026
Binance edits its notice to say user funds are safe
The revised wording replaces the earlier statement about unconfirmed impact; the investigation continues.
Oct 29, 2026
Binance says withdrawals will resume after the security issue is resolved
The exchange says it is conducting security checks and repeats that user funds remain safe. No restoration time is given.
Who said what
We list each claim and who made it. Primary sources (the vendor, the researcher, the registry) are marked. Where reports disagree, we grade by the worst credible case.
- Binance investigation noticePrimaryEarlier version of the exchange notice; initially checked by embed and later read directly, including its link to the edited version.
- Official X embed of Binance's noticePrimaryConfirms the investigation and says user-fund impact is not confirmed. The returned embed truncates the rest of the longer post.
- CZ statementPrimaryOriginal shareholder statement, read directly and through its official embed; not a statement by current exchange management.
- Official X embed of CZ's statementPrimarySuspects a hack, reports Tether/Circle freezes and expects funds to be covered; explicitly says he no longer manages Binance.com.
- CointelegraphReports suspicious transfers from a Binance-linked wallet and an exchange spokesperson's investigation statement. Read through the public search index; direct retrieval returned 403.
- Binance account security guidancePrimaryExplains account-activity checks, official-channel verification, credential protection and disabling an account after suspicious activity.
- Binance account-disable guidePrimaryGives the app and website disable-account paths and warns about reopening requirements.
- Binance revised investigation noticePrimaryEdited official notice now says user funds are completely safe while the security investigation continues.
- Binance withdrawal updatePrimarySecurity checks are ongoing; withdrawals will resume once the issue is fully resolved. Repeats the assurance about user funds but gives no resumption time.
- Official X embed of the withdrawal updatePrimaryIndependently readable primary copy of the complete withdrawal-status update.