Cryptocurrency exchange Binance has announced a major milestone in its recovery efforts following what is widely considered the largest security breach in digital asset history. According to the platform’s latest updates, Binance has successfully covered 90% of the approximately $6.3 billion stolen from its hot wallets during the late-October incident.
In a comprehensive recovery disclosure, Binance revealed that it has set aside more than $6.34 billion in company funds to fully absorb the losses and ensure that all user holdings remain entirely backed. The affected major assets—including Bitcoin (BTC), Ethereum (ETH), Tether (USDT), BNB (BNB), Solana (SOL), USD Coin (USDC), XRP (XRP), USD1 (USD1), Ripple USD (RLUSD), and Zcash (ZEC)—are now fully secured and accounted for within the exchange’s reserve system.
To achieve this unprecedented level of asset restoration, Binance drew upon a combination of internal financial resources. These included a substantial allocation from its Secure Asset Fund for Users (SAFU), designated portions of its futures insurance fund, and direct capital injections from the company’s own corporate treasury to aggressively buy back the stolen tokens from the open market.
Emphasizing the company’s commitment to shielding its customer base from the fallout of the incident, Binance stated that it will fully absorb the financial impact of the stolen funds rather than passing any losses onto its users.
While the vast majority of the portfolio has been restored, the remaining 10% of the stolen funds consists of less liquid tokens residing outside the top ten market capitalization rankings. Binance noted that acquiring these specific, lower-liquidity digital assets in the precise amounts needed may require a more extended timeline due to thinner market depths.
The security breach itself occurred on October 29 at approximately 20:05 UTC, targeting the exchange’s hot infrastructure. In the wake of the exploit, global cybersecurity analysts, private blockchain forensics firms, and law enforcement agencies—including the Federal Bureau of Investigation (FBI)—began investigating the vector and origin of the attack. Law enforcement and intelligence findings have increasingly pointed toward the North Korea-backed hacking syndicate known as the Lazarus Group, also frequently tracked under aliases such as TraderTraitor, as the primary perpetrator behind the massive heist.
Despite mounting evidence from international cybersecurity investigators, North Korean authorities have formally denied any state involvement in the cyberattack.
Binance Co-CEO Richard Teng provided additional operational insights into the sophistication of the breach, noting that the operation involved multiple actors who deliberately employed a "self-destruct mechanism" designed specifically to obfuscate their digital footprint and hinder forensic analysis. While preliminary internal investigations initially directed suspicion toward a single compromised engineer’s laptop, subsequent, deeper forensic audits uncovered multiple additional vectors and points of compromise within the system.
Amid the unfolding investigation, cooperative international efforts between Binance, industry partners, and global law enforcement agencies have successfully frozen approximately $3 billion worth of the stolen digital assets, preventing the hackers from easily liquidating a significant portion of the loot.
Demonstrating operational transparency and a commitment to regulatory compliance and user trust, Binance completed a fresh proof-of-reserves snapshot on October 31. The platform confirmed that it remains completely on track to resume standard user withdrawals, paving the way for normal platform operations to resume.
Comments (0)