Binance says about $2.85 billion in digital assets affected by its October 29 hack has been frozen or intercepted, while 98% of impacted token assets had been replenished by October 31.
The exchange disclosed the figures in its November 3 initial incident report, which says the company will absorb the losses rather than pass them to users. The recovery update adds to the attack chain detailed in Abijita’s earlier report on the fake-job-interview intrusion.
Binance said the frozen or intercepted total remains subject to reconciliation and market-price fluctuations. It was still purchasing the remaining, less-liquid tokens, and said it had set aside funds exceeding the amount needed to cover the loss.
The report says attackers gained unauthorized access to an internal wallet-signing service and used it to move assets outside the normal withdrawal process. Five hot wallets transferred 233.46 million XRP to an attacker-controlled address in four minutes, from 20:05 to 20:09 UTC, before other cryptocurrencies were moved. Reuters reported that the final unauthorized transfer occurred nearly four hours after the first theft.
Binance said it rebuilt affected wallet systems and internal AI tools, replaced compromised devices, revoked associated credentials and tokens, and completed enhanced security scans of employee devices. It has invited independent cybersecurity experts to review the incident.
If this article helped you, please consider supporting our work. Every small contribution keeps Abijita.com independent and running.
