Binance replenishes 90% of assets after $6.3 billion crypto breach

Traders Union
All News
Crypto
Binance replenishes assets post-hack

Highlights

Binance replenished 90% of assets lost in the $6.3 billion breach, fully backing BTC, ETH, USDT, BNB, SOL, USDC, XRP, USD1, RLUSD, and ZEC.
Binance funded replacement assets from its corporate treasury and futures insurance fund, with SAFU expected to restore to about $1 billion within 24 hours.
Security probe found additional breach points, with blockchain analytics attributing the hack to North Korea-linked TraderTraitor, increasing scrutiny on crypto sector risk controls.

Reserve rebuilding and withdrawal timeline

As reported by CoinDesk, citing Binance, the exchange has raised the share of stolen assets replaced to 90%, up from about 80% in its previous update, and says holdings of bitcoin, ether, USDT, BNB, SOL, USDC, XRP, USD1, RLUSD and ZEC are now fully backed.

The remaining 10% consists of less liquid tokens that Binance says may take longer to acquire in the required quantities. The company says it is sourcing those assets through public markets and over-the-counter trades, while working with industry partners to complete the purchases.

Binance says it had already set aside more than $6.34 billion in company funds, including $5 billion held in the affected cryptocurrencies. Those resources are separate from roughly $3 billion in stolen assets that partners had frozen.

The exchange says the replacement assets are being funded through its corporate treasury and part of its futures insurance fund, with a partial deployment of the Secure Asset Fund for Users, or SAFU, expected over the next 24 hours. Binance also says it will restore SAFU, its emergency user-protection reserve, to about $1 billion.

Security probe and market implications

The replenishment addresses a shortfall in assets backing customer balances after wallets drained in the attack were among those Binance had previously listed as backing users’ holdings. Binance has also published a new proof-of-reserves snapshot taken at midnight UTC on Oct. 31, showing coverage ratios of 100% or more for the named tokens.

The full cryptographic proof that would allow users to independently verify that their balances are included in Binance’s reported liabilities is expected by Nov. 3. Binance says the remaining futures insurance fund still meets its risk-management requirements after moving only the portion above its required size.

The security investigation remains open. Co-CEO Richard Teng said Friday that investigators had found additional breach points beyond an initially suspected compromised employee laptop, while U.S. President Donald Trump said the government is looking into whether North Korea was behind the attack.

Blockchain analytics firms TRM Labs and Chainalysis have attributed the hack to TraderTraitor, a North Korea-linked hacking group. The incident keeps pressure on the crypto sector’s reserve transparency and operational risk controls as exchanges work to reassure users after large-scale breaches.

Our earlier article on Cohere’s planned acquisition of AI cybersecurity startup AISLE explained how the deal would add AI-driven software vulnerability detection to Cohere’s broader buildout alongside its merger with Aleph Alpha. We noted that AISLE’s research focus—finding and helping fix flaws in widely used software such as OpenSSL—highlights why advanced threat detection and security engineering are becoming central as organizations face more sophisticated attacks.

This material may contain third-party opinions, none of the data and information on this webpage constitutes investment advice according to our Disclaimer. While we adhere to strict Editorial Integrity, this post may contain references to products from our partners.