Binance says it has replenished 90% of the cryptocurrency stolen in its $6.3 billion hot-wallet breach, up from about 80% in its previous update. The exchange said the remaining 10% consists of less-liquid tokens that may take longer to source, while withdrawals remain paused pending security checks.
In its October 31 recovery update, Binance said Bitcoin, Ether, Tether, BNB, Solana, USD Coin, XRP, USD1, RLUSD and Zcash are now fully backed. The company said it will continue buying the remaining affected tokens through market and over-the-counter channels until all assets are covered.
Binance said the replenishment uses a combination of its corporate treasury, a partial deployment of its Secure Asset Fund for Users (SAFU), and part of its futures insurance fund. The exchange said it intends to restore SAFU to approximately $1 billion and that the futures fund remains above its required coverage level.
The exchange also took a new Proof of Reserves snapshot at 00:00 UTC on October 31. Binance said the full zero-knowledge proof may take 40 to 50 hours to generate, with publication expected by Tuesday, November 3. Once available, holders of the listed tokens will be able to verify that their balances are backed at least 1:1.
Binance said it remains on track to resume withdrawals on Sunday, November 1, but has not provided a precise reopening time. The service will return only after the exchange completes remediation and confirms the integrity of its systems.
The recovery update follows Binance’s earlier account of the compromised DevOps laptop and its subsequent discovery of additional breach points. Blockchain intelligence firm TRM Labs separately attributed the theft to the North Korean-linked TraderTraitor group, an assessment covered in Abijita’s analysis of the on-chain evidence. Binance has not publicly confirmed the attackers’ identity.
Binance Says 90% of $6.3B Hack Losses Replenished



