Binance has started bringing crypto withdrawals back online after a temporary shutdown caused by a $6.3 billion cyberattack. The exchange said the restart will move in phases across 15 blockchain networks, not all at once.

The first phase includes Bitcoin, Ethereum, BNB, XRP and Solana. Binance also listed specific assets on several networks: USDT and USDC on Ethereum, BNB Smart Chain, Tron, Solana, TON, Polygon, Avalanche C-Chain, Arbitrum, Base and Optimism. Native coins for XRP, Zcash, Dogecoin and Sui are part of the first group too. The timing was set for between 09:00 and 12:00 Turkish time, according to Binance’s fourth security update.

What Users Can Expect

Binance said deposit transactions were not affected and kept running normally. Withdrawals will be turned on only after each network finishes its security checks. The queue order is based on user demand from the past week. The exchange warned that high traffic could cause delays or temporary failures in the first hours. Networks not yet open will be added later.

Changpeng Zhao also confirmed that Bitcoin withdrawals were active. His comment came after Binance began reopening access. That fits the exchange’s phased approach, though users may still see uneven service as more networks come back.

Recovery and Reserves

Binance said 95% of the assets lost in the attack have been covered using company resources. That is up from 90% in an October 31 update. The remaining 5% is mostly lower-liquidity altcoins. Binance said it is buying those assets through market transactions and over-the-counter purchases, but the process may take longer because liquidity is thin.

The 95% figure does not mean the stolen coins were recovered from attackers. Binance is covering losses in user accounts with its own reserves. According to the latest update, BTC, ETH, USDT, BNB, SOL, USDC, XRP, USD1, RLUSD and ZEC are now backed by 100% reserves.

Why the Restart Matters

For traders, the key question is access. A partial restart eases pressure, but it does not clear every bottleneck. Some networks are still waiting on checks, and demand could shape how fast each queue moves. Binance’s update suggests the exchange is prioritizing security checks over speed, which may frustrate users who want immediate access.

The incident remains one of the largest in crypto exchange history. Binance has not said the attackers were caught. Its focus, at least for now, is on restoring withdrawals and covering user losses. The exchange said more networks and coins will return after checks are complete.