App Binance é confiável? The App Is Genuine, but 161 of 531 Coins Still Have No Open Withdrawal Route

What the store listings show

We read both listings for the Brazilian storefront at 22:45 SGT.

The sources are the Google Play page and Apple's public lookup.

Those rows help you confirm you have the right app. A rating measures how people feel about using it. It tells you nothing about whether a coin can leave the exchange this week. Android users who cannot use Play should compare the signature first, using our APK check from earlier today.

Where the hack happened, according to the accounts we read

Binance's first statement estimated the impact at about $6.3 billion. It said the investigation pointed to a compromised DevOps engineer's laptop that gave an attacker access to a service container, and that it found no evidence of a wallet private key leak. TRM Labs counts about $6.36 billion and reads the event as a compromise of hot wallet signing infrastructure.

These accounts disagree on the method, and Binance's full post-mortem is still the document to wait for. Neither describes a fault in the customer app or a theft from customer phones. So reinstalling the app or changing phones does not address this event.

On the money, Binance's November 4 update says it covers the loss from its own resources and has replenished about 98% of the impacted amount. It also took a proof-of-reserves snapshot covering 44 tokens, and said a zero-knowledge proof would follow in about 50 to 60 hours. These are company statements. We did not see that proof, because the reserves page does not open for automated readers.

What has reopened since this morning

Binance's November 6 notice says withdrawals reopen progressively, asset by asset, and that deposits stay open. We read the public list behind its network status page twice today.

So 57 coins came back in about 18 hours, and 60 routes reopened on net. The first column comes from our earlier count.

The list also moved the other way for two large coins. USDT on TON and USDC on Optimism had open routes at 04:51 and were closed at 22:46. We do not know why. Treat any table, this one included, as a reading from a moment in time.

The BSC-only row can catch you out. If your own wallet accepts only native Cardano, a BSC route does not help.

Who you deal with in Brazil

Times Brasil reported on October 30 that BBrasil SPSAV LTDA. is the entity serving users in the country, and that it said client assets are held in cold wallets and follow the Central Bank's segregation rules. Investidor10 carries the statement's wording.

The rules themselves are real and recent. Central Bank Resolutions 519, 520 and 521 took effect on February 2, 2026. Times Brasil's summary lists separation of company and client assets, an independent audit every two years, and proof of reserves. The Lefosse law firm's note adds that firms already operating had 270 days from that date to file for authorization. By our count that ended on October 30, 2026.

Three limits matter here:

• The word SPSAV in a company's name does not show that its authorization was granted. The Central Bank pages we tried returned only an empty shell, so we did not confirm the status of this company's filing.
• Times Brasil says plainly that these requirements reduce the risk from poor management or insolvency and do not guarantee reimbursement.
• We found no statement that a coin's global withdrawal status differs for Brazilian accounts. The local notice said crypto withdrawals were suspended as well. Check your own account screen.

The risk that does live on your phone

Kaspersky's BeatBanker report of March 10, 2026 describes a fake store page that looks like Google Play and offers a fake "INSS Reembolso" app, posing as the portal of Brazil's social security institute. With accessibility permission, the malware watches for the real Binance app, com.binance.dev. When the user tries to withdraw USDT, it draws a realistic page over the confirmation screen and swaps the destination address.

In that attack the Binance app was genuine, and the thief was a different app on the same phone. Checking the Binance app alone would not have caught it.

Refund scams follow a hack of this size. Binance's first statement asks users to rely only on official channels, and the notices we read describe no form to fill in or fee to pay. A message offering "compensação" for a login or a payment is a reason to stop.

Five checks before you trust it with money

1. Confirm the app. Use the store listing and compare the identifier and seller in the table above.
2. Review accessibility permissions. Remove any app holding them that you cannot explain, above all one installed from a link.
3. Set an anti-phishing code. Genuine Binance emails and SMS then carry a code you chose.
4. Turn on the withdrawal whitelist. It limits withdrawals to addresses you already saved.
5. Test your exact coin and network. Open the withdrawal screen, send a small amount and compare the address in your history with the one you meant to use.

Costs are in our Binance fee guide for Brazil. Keep on any exchange only what you could live with having stuck for a while, since a closed route can arrive without warning.

Is another exchange different?

The same checks apply on any venue, and this hack does not show that another one is safer. We did not compare reserves or security records. If you are comparing costs, our partner data lists a 0.10% spot taker fee on Bitget and OKX. Bitget returns 60% of fees through its rebate, settled daily, so a R$ 1,000 trade costs R$ 1.00 and returns R$ 0.60. OKX returns 20%, settled hourly, or R$ 0.20 on the same trade. Our Binance page has the venue's profile and regional details.

What we could not verify

• Whether the Central Bank has authorized BBrasil SPSAV or is still reviewing a filing.
• The cold-wallet and segregation claims, beyond the company's own words.
• Whether the zero-knowledge proof is finished, and which 44 tokens it covers.
• The attack's final cause, and a reopening date for any closed route.
• Reclame Aqui's complaint record for Binance, because the page blocked our reader.

Quick answers

Is the Binance app a scam?

The listing on Google Play is com.binance.dev with more than 100 million downloads. The App Store listing's seller is Binance Switzerland AG. Fake copies exist, so install through the store and check those details.

Is my money insured on Binance in Brazil?

We found no government scheme named in the sources we opened. Binance says it covers these losses from its SAFU fund and company money, which is a company commitment.

Can I withdraw from the app today?

It depends on the coin and network. At our read, USDT had eight open networks and USDC seven, while ATOM, PEPE and TON had none. The withdrawal screen for your coin is the reading that counts.

Does updating the app fix anything?

An update keeps your app current. It does not change which withdrawal routes are open, because Binance controls those on its side.