SINGAPORE — Cryptocurrency exchange Binance announced on Saturday, October 31, 2026, that it has successfully replenished approximately 90% of the digital assets stolen in a record-breaking $6.3 billion security breach.
The update follows an earlier recovery milestone where 80% of affected funds had been restored using internal company reserves and strategic market acquisitions. Binance reiterated that the exchange will fully absorb all financial losses from the incident to ensure that individual account balances remain protected.
Capital Allocation and Proof of Reserves
To cover the multi-billion-dollar breach, Binance set aside more than $6.34 billion in internal corporate funds, drawing from its Secure Asset Fund for Users (SAFU), its Futures insurance fund, and corporate treasury accounts.
Binance Capital Allocation & Recovery Overview
+-------------------------------------------------------------------------+
| ESTIMATED TOTAL IMPACT: ~$6.3 Billion |
| COMPANY FUNDS ALLOCATED: ~$6.34 Billion |
| CURRENT REPLENISHMENT LEVEL: 90% Completed |
| FULLY BACKED ASSETS (100%): BTC, ETH, USDT, BNB, SOL, USDC, XRP, |
| USD1, RLUSD, ZEC |
| CAPITAL SOURCES: SAFU Fund, Futures Insurance Fund, Corporate Treasury |
+-------------------------------------------------------------------------+
The exchange confirmed that major digital assets—including Bitcoin (BTC), Ethereum (ETH), Tether (USDT), BNB, Solana (SOL), and USD Coin (USDC)—are now fully backed at 100%. Binance noted that it will continue purchasing the remaining token balances through open market and over-the-counter (OTC) channels until 100% coverage is achieved across all listed tokens.
Breach Context and On-Chain Freezes
The breach, attributed by cybersecurity firms and threat intelligence agencies to North Korea-linked cyber operations, originated from a compromised DevOps engineer endpoint. The unauthorized access allowed attackers to submit fraudulent withdrawal transactions without compromising user private keys directly.
Security Incident & Asset Tracking Summary
+-------------------------------------------------------------------------+
| ON-CHAIN FROZEN ASSETS: ~$3.0 Billion (Joint Stablecoin Protocols) |
| RECOVERED / REPLENISHED ASSETS: ~$5.0+ Billion in Equivalent Holdings |
| ATTACK VECTOR: Compromised DevOps Endpoint / Service Container Access |
| OPERATIONAL STATUS: Withdrawal Audits Active; System Hardening Ongoing |
+-------------------------------------------------------------------------+
Working alongside stablecoin issuers and law enforcement agencies, Binance successfully froze approximately $3 billion in stolen assets on-chain shortly after the breach was detected.
Next Steps for Exchange Operations
Binance safety teams continue to conduct comprehensive system audits and log reviews prior to fully restoring standard withdrawal features. The exchange confirmed it will publish an updated Proof of Reserves snapshot to provide verified on-chain transparency once all remaining asset reserves hit the 100% threshold.
