Binance Covers 90% of Losses After $6.3 Billion Crypto Hack
Binance Covers 90% of Losses After $6.3 Billion Crypto Hack
The exchange says it will cover the remaining losses using its own financial resources.
The announcement came after hackers stole billions of dollars in digital assets from the world’s largest cryptocurrency exchange by trading volume. The incident has raised fresh concerns about the security of digital currencies and the risks facing crypto investors.
Binance said it had already replaced about $6 billion of the affected assets by October 31, 2026. The company also promised that customers would not bear the financial impact of the attack.
Binance Moves to Replenish Stolen Crypto Assets
Binance said it used company funds to purchase replacement tokens after the attack. The remaining 10% consists of less liquid cryptocurrencies, which may take longer to obtain in the quantities required.
The exchange has committed to covering the outstanding amount. Its co-chief executive, Richard Teng, said the company remained committed to protecting users from the financial impact.
Binance has also set aside approximately $6.34 billion in funds to cover the losses. The resources include money from its corporate treasury, its Futures Insurance Fund and part of its Secure Asset Fund for Users, known as SAFU.
SAFU is a reserve designed to help protect customers during certain unexpected incidents. Binance has also pledged to restore the fund to approximately $1 billion after using part of its resources to address the breach.
The move is intended to reassure customers that their account balances will remain protected despite the scale of the theft.
FBI Blames North Korean Hacking Group
The United States Federal Bureau of Investigation has attributed the attack to TraderTraitor, a cyber unit linked to North Korea.
According to the FBI, members of the group were observed converting stolen assets into Ethereum. Investigators also warned that the funds could be moved through decentralised finance platforms and instant cryptocurrency exchange services to make tracing them more difficult.
The attribution follows earlier assessments by blockchain analysis companies that linked the incident to North Korean cybercriminals.
North Korea has faced repeated accusations of using cyber operations to steal cryptocurrency and generate revenue. However, the country has denied using state-linked cyber units for criminal activities.
The investigation into the Binance attack remains important because stolen digital assets can move quickly across different blockchain networks. Once funds pass through several services, tracing and recovering them can become more difficult.
Billions of Dollars in Assets Traced
Binance has worked with industry partners to identify and freeze some of the affected assets.
The company reported that approximately $3 billion in assets had been located by October 30. However, locating stolen cryptocurrency does not necessarily mean that all the funds have been recovered or returned.
Investigators and blockchain security specialists continue to face the challenge of tracking the remaining assets.
The scale of the incident has also raised questions about how cryptocurrency exchanges secure their wallets and approve transactions.
Binance described the incident as a complex attack. Teng said investigators had identified a compromised laptop and malicious software designed to delete evidence of its activity.
The company has not publicly resolved every question about how the attackers gained access to the affected systems.
Crypto Market Faces Fresh Security Concerns
News of the attack put pressure on cryptocurrency prices. Bitcoin, Ethereum and Binance’s BNB token all recorded sharp falls following the incident, according to market reports.
The reaction highlighted how security breaches at major exchanges can affect confidence across the wider digital asset market.
Investors rely on exchanges to protect their holdings, maintain reliable withdrawal systems and provide clear information when problems occur.
A major breach can therefore create uncertainty even for people who did not directly lose money.
Binance Promises to Protect Customers
Binance temporarily suspended customer withdrawals following the attack while it worked to stabilise its systems and replace the stolen assets.
The company said withdrawals would resume in stages to help maintain stability. The phased approach was intended to reduce the risk of further disruption as normal services returned.
Binance also announced a new snapshot of customer assets as part of its proof-of-reserves process. The exchange said users holding certain listed tokens would be able to verify that the assets were backed at a minimum ratio of one to one once the relevant proof became available.
The company now faces the task of completing the replenishment, supporting its investigation and restoring customer confidence.
Although replacing most of the stolen assets is a significant step, the attack has highlighted the continuing risks facing cryptocurrency platforms.
For investors, the incident is another reminder that digital asset security depends on more than market prices. Strong internal controls, rapid incident response and transparent reporting are also essential to protecting customer funds.
About the Author
