Binance Recovers 90% of Stolen Assets After $6.3 Billion Breach

Binance reports significant recovery of stolen funds following a major security breach, with plans for phased restoration of services.

A
Aapla Nagpur Desk
31 Oct 2026, 8:26 PM IST · 2 min read
Source: Moneycontrol
Binance Recovers 90% of Stolen Assets After $6.3 Billion Breach
KEY TAKEAWAYS
1

Binance has replenished 90% of the $6.3 billion stolen in a security breach.

2

The exchange is using its Secure Asset Fund for Users to cover losses.

3

A North Korean hacking group is suspected to be behind the attack.

In a significant update, Binance announced that it has successfully replenished approximately 90% of the assets stolen during a massive security breach that resulted in losses exceeding $6.3 billion. The exchange revealed this information on Saturday, stating that it has allocated more than $6.34 billion from its corporate treasury and Secure Asset Fund for Users (SAFU) to cover the losses and ensure that users are not financially impacted by the incident.

The breach, which occurred on October 29, saw unauthorized withdrawals from Binance's hot wallets, leading to the theft of a substantial amount of digital assets. Following the incident, Binance confirmed that it has already secured around $5 billion worth of the stolen assets, including major cryptocurrencies like Bitcoin, Ether, and Tether. The exchange is actively working to restore withdrawal services in phases, with plans to continue purchasing the remaining token assets until full coverage is achieved.

Binance's recovery efforts have also involved freezing approximately $3 billion in stolen assets through collaboration with law enforcement and blockchain intelligence agencies. The exchange's technical team is aiming to resume withdrawal services within 34 hours, contingent upon the completion of necessary security checks. Meanwhile, deposits and other unaffected services remain operational, providing some continuity for users during this challenging period.

The investigation into the breach has revealed that a compromised laptop may have been the initial point of entry, although further inquiries have identified additional vulnerabilities. Notably, blockchain investigation firms have linked the incident to a North Korean hacking group, TraderTraitor, which has been implicated in other cryptocurrency thefts that reportedly fund the country's weapons programs. Binance has stated that it will issue a detailed report on the breach and the enhanced security measures being implemented to prevent future incidents.

Looking ahead, Binance plans to release an updated Proof of Reserves report by November 2, allowing users to verify the digital assets backing their account balances. The exchange remains committed to transparency as it navigates the aftermath of this significant security breach, with ongoing investigations aimed at identifying the full scope of the incident and enhancing security protocols.

💬What did you think of this story?What did you think?

Read Next