Binance's tracked assets have fallen $15.7 billion since the October 29 hack, from $144.9 billion to $129.2 billion, according to DefiLlama wallet data as of November 2. Net outflows exceeded $7 billion in the 48 hours after the exchange restored withdrawals on November 1. OKX absorbed the larges...
"Our commitment remains clear: Binance will absorb the financial impact of the stolen funds, not our users." — Richard Teng, Co-CEO, Binance
Binance's tracked assets have fallen $15.7 billion since the October 29 hack, from $144.9 billion to $129.2 billion, according to DefiLlama wallet data as of November 2. Net outflows exceeded $7 billion in the 48 hours after the exchange restored withdrawals on November 1. OKX absorbed the largest share of redirected capital, logging $445 million in daily net inflows. Bybit, Gate, and Bitget followed with $112 million, $91 million, and $54 million, respectively. Coinbase and Kraken gained roughly 984 BTC and 1,422 BTC in on-chain balances over 24 hours.
Despite the drawdown, Binance's wallet holdings of $127.9 billion remain more than four times OKX's $29 billion. The exchange retained a 42.7% share of centralized spot trading volume in Q3 2026, according to CoinGecko. The question now is whether the hack permanently compresses that margin or, as with Bybit's $1.5 billion breach in February 2025, market share proves recoverable.
The $6.3 billion hack, attributed by the FBI to North Korea's TraderTraitor operation, forced Binance to suspend all withdrawals from late October 29 through November 1. Withdrawals resumed in phases starting at 06:00 UTC on November 1, with all 15 networks and assets in the initial tranche restored by 12:36 UTC.
In the first 9.5 hours, Binance processed $4.649 billion in withdrawals against $1.01 billion in deposits, producing a net outflow of $3.64 billion, according to data the exchange disclosed. That figure represented 2.1% of Binance's $171 billion in pre-hack assets under management.
By the end of November 2, cumulative net outflows had reached approximately $7 billion. Wallet-tracked assets dropped $15.7 billion from their pre-hack level of $144.9 billion, a decline that includes both the $6.3 billion in stolen funds and the subsequent user withdrawals.
Co-CEO Richard Teng stated on November 1 that Binance had replenished approximately 95% of the stolen assets using corporate treasury, emergency reserves, and insurance funds. The remaining 5% consisted of less liquid tokens requiring more time to acquire. A full zero-knowledge proof-of-reserves report was scheduled for release by November 3.
DefiLlama exchange flow data for November 1-2 shows a clear redistribution pattern:
| Exchange | 24h Net Flow | Direction | |----------|-------------|-----------| | Binance | -$7.0B | Outflow | | OKX | +$445M | Inflow | | Bybit | +$112M | Inflow | | Gate | +$91M | Inflow | | Bitget | +$54M | Inflow | | Coinbase | +984 BTC | Inflow | | Kraken | +1,422 BTC | Inflow |
OKX captured the largest inflow at $445 million in a single day, according to Cointelegraph citing DefiLlama data. This positions OKX as the primary beneficiary among offshore exchanges. On-chain Bitcoin balances tell a parallel story: Binance's Bitcoin holdings fell by 19,289 BTC over 24 hours, while Coinbase gained 984 BTC and Kraken gained 1,422 BTC.
A critical observation: only a fraction of the capital leaving Binance moved to rival exchanges. The combined inflows at OKX, Bybit, Gate, and Bitget totaled roughly $702 million — less than 10% of Binance's $7 billion in net outflows. The majority of withdrawn funds appear to have moved to self-custody wallets, DEXs, or cold storage, rather than to competing centralized platforms.
CoinGecko's Q3 2026 Crypto Industry Report placed Binance at 42.7% of spot trading volume among the top 10 centralized exchanges, up from 38.7% in Q2 2026. No other exchange held a double-digit share. The top 10 combined processed $1.65 trillion in spot volume during Q3, down 14.2% from Q2's $1.93 trillion.
Binance was the only exchange to gain market share quarter-over-quarter in a declining volume environment. As of October 2026, Binance held $171 billion in assets under management — a figure that dwarfed every competitor. OKX, the second-largest exchange by tracked wallet assets, held approximately $29 billion.
This dominance has both stabilized and exposed Binance. The exchange's sheer scale allowed it to absorb the $6.3 billion loss from corporate reserves. Simultaneously, that same concentration of assets made it the highest-value target in crypto history.
Bybit's February 2025 hack offers the closest historical parallel. That breach drained $1.5 billion — 4.2 times smaller than Binance's loss in absolute terms — and triggered a 5.0% decline in the broader crypto market. The Binance hack produced a comparable 4.8% market drawdown, suggesting market sensitivity to exchange hacks may be diminishing even as their absolute size grows.
After its hack, Bybit's market share initially fell but recovered over the following months. By year-end 2025, Bybit had recaptured meaningful volume, reaching $1.5 trillion in total annual trading volume and holding an 8.1% market share, according to CoinGecko.
The Bybit precedent suggests exchange hacks, when handled without user loss, do not permanently impair market share. However, Binance's situation is materially different: the stolen amount is 4.2x larger, regulatory scrutiny is higher (Binance is already operating under a U.S. DOJ monitorship from its 2023 settlement), and the exchange's pre-hack dominance was more extreme. Whether 42.7% market share proves sticky depends on user behavior over the next 90 days.
Binance committed to publishing a zero-knowledge proof-of-reserves report by November 3. The computation takes 40-50 hours due to the cryptographic workload involved, according to the exchange.
The timing is significant. Binance's previous proof-of-reserves infrastructure was built after the FTX collapse in 2022. The initial audit partner, Mazars Group, paused all crypto audit work in December 2022 amid concerns about how the reports were publicly interpreted. Since then, Binance has relied on self-generated zero-knowledge proofs — a methodology that provides cryptographic verifiability but lacks the third-party attestation that traditional audits provide.
The November 3 report will be the first proof-of-reserves snapshot published after a major security breach at a top-tier exchange. Market participants will be scrutinizing whether the reported reserves match the $127.9 billion in wallet-tracked assets visible on DefiLlama, and whether the 95% replenishment claim holds under independent verification.
The Crypto Fear & Greed Index fell to 30 on October 30, marking its lowest reading since mid-August 2026. The index dropped 21 points from its pre-hack level of 51.
The contagion spread to U.S. spot Bitcoin ETFs. On October 30, the day after the hack, ETFs recorded $643.33 million in net outflows — the largest single-day exit since June 2026. BlackRock's IBIT shed $233.70 million and Fidelity's FBTC lost $201.04 million, with the two funds accounting for 68% of total outflows. The withdrawals reversed a four-day inflow streak and pushed October's cumulative ETF flows from a net gain of $128.3 million to a net loss of $515 million.
Bitcoin traded between $76,300 and $78,000 over the weekend, holding above panic-selling thresholds. This price resilience, combined with the relatively modest 4.8% market drawdown, suggests institutional participants view the hack as an exchange-specific event rather than a systemic risk.
However, the ETF data cannot be causally linked to the Binance hack alone. The outflows occurred alongside broader market factors including approaching U.S. midterm elections and an anticipated nonfarm payrolls report.
The data points to three structural dynamics:
1. Concentration risk is repriced, not eliminated. Binance's 42.7% spot market share means a single point of failure holds nearly half the industry's centralized trading activity. The hack has not triggered mass defection — $702 million in total inflows to rivals against $7 billion in Binance outflows — but it has reminded market participants of the asymmetric risk of exchange concentration.
2. Self-custody is the primary exit, not rival exchanges. The gap between Binance outflows ($7 billion) and competitor inflows ($702 million) implies that the majority of displaced capital went to non-custodial wallets or decentralized platforms. This is consistent with post-hack behavior observed after the FTX collapse in 2022 and the Bybit breach in 2025.
3. Offshore exchanges benefit disproportionately. OKX, Bybit, Gate, and Bitget — all offshore platforms — captured the lion's share of exchange-to-exchange flows. U.S.-regulated platforms Coinbase and Kraken saw comparatively modest BTC inflows. This suggests that the user base most affected by the Binance hack skews toward non-U.S. retail traders who prioritize similar product offerings (high leverage, extensive altcoin listings) over regulatory regime.
The $6.3 billion Binance hack has produced the largest capital reshuffling in centralized exchange history. The data shows a clear but partial migration: OKX and other offshore platforms absorbed hundreds of millions in inflows, while the bulk of withdrawn capital moved off-exchange entirely. Binance's remaining $127.9 billion in tracked assets still dwarfs every competitor by a factor of four.
The November 3 proof-of-reserves report will determine whether the 95% replenishment narrative holds. If it does, Binance is likely to follow Bybit's recovery trajectory — bruised but operational, with market share stabilizing within 90 days. If discrepancies emerge, the exchange faces a credibility crisis that no amount of corporate treasury can resolve.
For now, the data shows fear but not panic, redistribution but not defection, and a CEX market that remains structurally dependent on its largest participant.