Binance Thailand has temporarily suspended cryptocurrency withdrawals following the major security incident affecting its international affiliate, despite insisting that its customer assets are held in independently segregated cold wallets. The Thai platform continues to support trading and Thai-baht deposits and withdrawals, while cryptocurrency deposits have also resumed or remained available following an initial suspension.
Gulf Binance Co., Ltd., which operates Binance TH, confirmed the restrictions on October 30, describing them as a precaution while its security team examines potential exposure to the incident involving the global Binance exchange. The company emphasized that Binance TH operates as a separate legal entity with its own digital-asset custody infrastructure and that its cold wallets are strictly segregated from those of Binance.
The decision nevertheless raises an important operational question: why did a security incident affecting an international affiliate lead to withdrawal restrictions at a Thai exchange that says its custody arrangements are independent?
The distinction is particularly relevant because Binance TH customers have not been told that their assets were compromised. Instead, the exchange has restricted one of the most important functions for customers seeking to move cryptocurrency into self-custody or another trading venue, even as other platform services remain available.
Binance TH Restricts Crypto Withdrawals While Fiat Transfers Continue
In its October 30 security statement, Gulf Binance said customer digital assets on Binance TH remained safe because the platform’s cold wallets were strictly separated from Binance’s wallets.
The company also stressed that it operates as an independent legal entity with a dedicated digital-asset custody system. Nevertheless, it initially announced a temporary suspension of both cryptocurrency deposits and withdrawals while specialists conducted a security assessment.
A subsequent Binance TH service-status update clarified the restrictions. Digital-asset trading continued normally, Thai-baht deposits and withdrawals remained available, and cryptocurrency deposits were unaffected. Only cryptocurrency withdrawals remained temporarily suspended while additional checks were conducted.
Gulf Binance said its initial system checks had not identified irregularities. However, the company maintained the withdrawal restriction as an additional precaution and said it would notify customers when the service became available again.
The distinction between fiat and cryptocurrency transfers is important. Customers can continue moving Thai baht through the platform’s supported payment channels, but they cannot transfer digital assets to external blockchain addresses while the restriction remains in place. Trading can therefore continue internally even though customers temporarily lose access to an essential route for transferring their cryptocurrency holdings elsewhere.
The restrictions followed a serious security incident at Binance’s international exchange. In its October 30 security update, Binance said its preliminary investigation suggested that an attacker may have gained access through a compromised DevOps engineer’s laptop, subsequently reaching a service container and submitting unauthorized withdrawal transactions.
Binance estimated the total impact at approximately $6.3 billion and said around $3 billion in affected assets had been frozen on-chain through coordination with blockchain partners. The exchange said it had found no evidence that wallet private keys were leaked and pledged to cover all losses using its Secure Asset Fund for Users (SAFU) and company funds.
The global exchange also temporarily suspended withdrawals while security checks were conducted. Its subsequent update clarified that deposits remained available, with withdrawals still subject to additional security work.
The Thai suspension therefore came amid a broader effort to contain the international incident, but Gulf Binance has not disclosed evidence that its own custody infrastructure or customer assets were compromised.
Thailand’s SEC Monitors Local Exchanges Following Binance Incident
The developments also attracted the attention of Thailand’s Securities and Exchange Commission. In a statement published on October 30, the regulator said it was monitoring the international Binance security incident and coordinating with licensed digital-asset operators in Thailand to assess potential risks to customer assets.
According to the Thai SEC announcement, information submitted by regulated operators had not identified any significant impact on customer assets held under the supervision of Thai businesses at the time of publication.
The regulator nevertheless instructed relevant operators to continuously assess risks, verify the status and security of customer assets, report incidents that could affect assets or services, and provide timely information to customers when restrictions or other disruptions occur.
Importantly, the SEC clarified that the incident occurred at Binance’s international platform, which does not fall under its direct supervision. Its monitoring activity is therefore focused on licensed Thai operators and the protection of investors using those businesses.
The regulator also reminded investors to use licensed providers and follow official communications, warning that criminals could exploit the incident through impersonation attempts and fraudulent requests for asset transfers.
For Binance TH, the regulatory attention adds another layer to the operational response. Although the exchange says its custody arrangements are independent, the suspension demonstrates that the perceived risk surrounding an international affiliate can still influence the availability of services at a separately regulated local platform.
Separate Custody Does Not Necessarily Mean Operational Independence
The most significant question raised by the Thai restrictions concerns the difference between asset segregation and operational independence.
Maintaining separate cold wallets can reduce the possibility that a compromise of one exchange’s private-key infrastructure directly exposes another platform’s customer assets. Independent legal entities and dedicated custody arrangements can also help establish clearer responsibilities for safeguarding customer funds.
However, these arrangements do not necessarily mean that every operational component is independent. Exchanges can still share technology providers, security intelligence, compliance systems, management processes, software infrastructure and incident-response procedures without sharing private keys or custody wallets.
A security incident at one affiliate could therefore justify precautionary restrictions elsewhere even if there is no evidence of direct access to the second platform’s wallets. For example, a shared software component or authorization process might require verification, while management could independently decide to pause withdrawals until it is satisfied that no related exposure exists.
None of these possibilities has been confirmed as the reason behind Binance TH’s decision. Gulf Binance has not disclosed whether the restriction resulted from shared infrastructure, coordinated security instructions from the wider Binance group or an independent risk-management assessment. The distinction will matter when the company provides a fuller explanation.
The restriction also highlights a familiar problem for centralized exchanges: customers can continue trading on an internal ledger while losing the ability to move their holdings through external blockchain networks. This creates a difference between having an account balance available for trading and having practical control over the underlying assets.
Dave Finances has previously examined how Binance’s wallet infrastructure upgrades can interrupt deposits and withdrawals while trading remains operational. The current situation is materially different because the restriction is a security precaution rather than scheduled maintenance. The distinction illustrates why customers should pay attention not only to whether trading is available but also to the actual status of external funding and withdrawal channels.
Withdrawal Resumption and Custody Transparency Become Key Tests
The immediate issue for Binance TH customers is when cryptocurrency withdrawals will resume. Gulf Binance has not provided a definitive reopening time, instead saying the service will return once additional checks have been completed.
More importantly, the company could help clarify the relationship between its separate custody arrangements and the decision to suspend withdrawals. Investors would benefit from knowing whether the review identified any shared technical dependencies, whether the restriction was imposed purely as a precaution and what specific checks must be completed before transfers are restored.
There is also a broader question for the Binance group. If local affiliates maintain independent custody systems, the company must demonstrate how that separation works during a major security incident and whether customers can expect local services to remain operational when international infrastructure is affected.
For now, there is no confirmed evidence that Binance TH customer assets were compromised or that its cold wallets were accessed by the attacker. The Thai SEC has also reported no significant impact on customer assets held by regulated operators in the country at the time of its assessment.
Nevertheless, the withdrawal suspension demonstrates that separate custody does not automatically guarantee uninterrupted customer access. The eventual reopening of cryptocurrency withdrawals, together with a clearer explanation of the security checks, will provide a more meaningful indication of how independent Binance TH’s operational safeguards are from the wider exchange.
Until then, the incident leaves an important distinction for investors: customer assets may remain segregated and secure while the ability to transfer them is temporarily restricted. For centralized exchanges operating across multiple jurisdictions, proving that distinction through transparent incident reporting could become just as important as demonstrating that their wallets are technically separated.
Johan Shamshad is a financial markets writer at Dave Finances covering cryptocurrencies, trading platforms, brokers, fintech, financial regulation, and developments across global markets. He previously worked at Gulf News, adding newsroom experience to his coverage of fast-moving financial and digital-asset markets.
His work focuses on identifying market-moving events, company developments, regulatory changes, product launches, and shifts in trading and financial infrastructure.
Johan contributes news and analysis designed to help readers understand not only what happened, but why a development matters and how it may affect the wider financial landscape. You can reach out to him via his social media accounts:
Linkedin: https://www.linkedin.com/in/johan-shamshad-742851262/
X: https://x.com/Yasmine_FX
Investing: https://www.investing.com/members/contributors/279781574