OKX Leads Exchange Inflows as Binance Outflows Top $7 Billion

Exchange flows show a sharp split: OKX drew the most net deposits among tracked platforms, while Binance faced more than $7 billion in outflows as it restored withdrawals after a $6.3 billion hack. Binance still held about $127.9 billion in wallets tracked by DefiLlama, over four times OKX’s $29 billion. The figures describe different things: net flows measure recent movements, while wallet balances show the assets tracked at a point in time. Read together, they suggest that a large reserve base and a sudden rush of withdrawals can coexist.

OKX leads daily inflows

OKX posted roughly $445 million in net inflows over 24 hours, according to DefiLlama. Bybit followed with $112 million, Gate with $91 million and Bitget with $54 million. These numbers put OKX well ahead of the other listed platforms for the measured period, but they’re a snapshot, not a verdict on long-term customer confidence. Exchange-flow trackers can show where assets appear to be moving; they don’t, by themselves, explain why users moved them or whether the same pattern will continue.

Binance’s net outflows climbed past $7 billion, up from $5.8 billion earlier Monday. The exchange said it began reopening withdrawals in stages at 6:00 a.m. UTC Sunday, after suspending them Friday following the late-Thursday theft. The timing matters: a pause on withdrawals can leave customers unable to move funds just as concerns about an incident are rising, while reopening access can produce a wave of requests that had been waiting. That makes the outflow figure striking, but it also means the number needs to be read alongside the service disruption.

Here’s the thing: large withdrawals don’t establish that an exchange is insolvent, just as large wallet balances don’t establish that every customer can withdraw immediately. The figures offer a view of assets and movement, with limits. For customers, the practical questions are whether withdrawals are available, how the exchange is replacing affected assets, and what its published reserve information actually covers.

Binance replaces affected assets

By Sunday, Binance said it had replenished about 95% of the affected assets, compared with 90% on Saturday. It was still buying the remaining 5%, which consisted of less liquid tokens, through market and over-the-counter transactions. The change suggests the bulk of the replacement work happened relatively quickly, while the final portion presented a different problem: less liquid assets can be harder to acquire in size without moving prices or finding willing counterparties. The exchange’s stated progress is useful, though the percentage alone doesn’t show which assets were replaced or how the remaining purchases would be completed.

The exchange said it would cover the losses without charging customers. Its replacement funds draw on the corporate treasury, part of its Secure Asset Fund for Users (SAFU) and a portion of its futures insurance fund. About $3 billion in stolen assets frozen by industry partners is separate from those funds. That distinction matters: frozen assets may be unavailable to the thief, but Binance’s description treats them separately from the money it says it is using to make customers whole. A reader shouldn’t add the frozen amount to the replacement resources as though they were the same pool.

This is more significant than it looks: an exchange’s response is judged not only by how much it says it has replaced, but by whether users can access their funds and whether the explanation can be checked. The source gives Binance’s account of its funding plan and progress. It doesn’t provide a breakdown of the replacement amounts by asset, so the headline percentage leaves some questions unanswered.

Binance said Sunday it had published a new reserves snapshot, with an updated proof-of-reserves report expected Monday. Its wallet holdings remained substantially larger than OKX’s despite the outflows. A reserves snapshot can help readers inspect what an exchange reports holding, while a proof-of-reserves report may provide a more structured account of those holdings. Neither label, on its own, explains every detail about liabilities or how a specific customer balance is represented. And this is the part most people overlook: the larger wallet figure is not a direct measure of how the exchange handled the hack or how many users chose to stay.

Token prices edge higher

OKX’s OKB rose about 1.4% in 24 hours to around $113 on Monday, while BNB gained 0.3% to roughly $708, according to CoinMarketCap. Both tokens were higher over the reported window, but the gains were modest beside the scale of the exchange flows and the reported theft. A single day’s price movement can reflect many buyers and sellers acting for different reasons, so it can’t establish that the market has settled on a view of either exchange’s response.

The contrast is still worth watching. OKX led the listed platforms in net inflows, while Binance remained much larger by tracked wallet holdings and faced substantial withdrawals. Those measures can move in different directions without contradiction: one captures recent net movement, the other an estimated stock of assets. If you’re working in this space, keep those measures separate when assessing what these figures say about customer activity.

What the figures leave open

The immediate picture is one of operational recovery under pressure. Binance says it has resumed withdrawals in stages, replaced most affected assets and is purchasing the remainder. At the same time, its reported net outflows rose above $7 billion, and its updated proof-of-reserves report was still expected. The figures don’t settle whether withdrawals will continue at the same pace or what the next reserve report will show. A snapshot can change quickly as customers move assets and the exchange replenishes wallets.

For now, the clearest reading is also the narrowest: OKX recorded the largest inflows among the platforms cited, Binance recorded heavy outflows after a withdrawal suspension, and Binance’s tracked wallet balance remained much higher than OKX’s. That’s a useful account of activity, but it isn’t a full explanation of customer confidence, the final cost of the incident or the quality of either exchange’s controls. The next reported reserve information and the completion of the remaining asset purchases will give readers more to assess.

Related: THORChain’s RUNE jumps 13% after Binance’s record $6.3B hack

Cointelegraph says it produces independent journalism across crypto, blockchain, AI and fintech. Its news, reviews and analysis are created independently; details are available in its Editorial Policy.