pandaBinance incident update: 95% replenishment reported; withdrawals return in stages
Binance updates replenishment and withdrawal plans. Replenishment, recovery and your own receipt are different checks.
Public evidence: distinguish announcements from analysis
TRM Labs estimates roughly USD 6.36 billion left Binance wallets on 29 October and attributes the attack to TraderTraitor. This is TRM’s assessment. Binance reports about 95% replenishment on 1 November and promises to absorb losses. Panda has not audited that percentage.
What changed: 90% to about 95%
The 31 October notice reported 90%; the 1 November update reports approximately 95%. Its first-phase withdrawal window is 14:00–17:00 Beijing time on 1 November, with availability staged by asset and network. A timetable does not establish that every account can withdraw now.
Panda analysis: replacement is not recovery
Buying replacement assets, recovering or freezing stolen funds, and receiving a customer transfer require different evidence. “95% replenished” does not mean “95% recovered”. Reserve snapshots and compensation promises do not establish that all risks are resolved.
Worked example: checking a USDT transfer
For USDT on TRON, check the asset/network status, destination address and receiving network in your authenticated app. Retain the order reference, processing status and onchain transaction, then reconcile the receipt. This is a checking workflow, not a test of your account or certification that the route is currently available. Avoid duplicate submissions while an order is processing.
Unknowns and follow-up
The final incident review, completion for every affected asset and individual withdrawal outcomes need further evidence. Attribution analysis is not a final judicial finding. This is a timestamped report, not a live status page; later announcements and account records may require corrections.
Editorial notes and sources
The article distinguishes reported facts from Panda analysis. Sources are credited for verification and do not endorse Panda. Original URLs are retained in the provenance record; this page has no outbound buttons.
- Binance Announcement — 安全事件恢复进展公告#4 · 2026-11-01
- Binance Announcement — 资产回填进展与储备金证明快照 · 2026-10-31
- TRM Labs — North Korea Steals USD 6.36 Billion From Binance · 2026-10-29