Binance Covers 90% of $6.3bn Hack Losses

Binance has absorbed a staggering $6.3bn (£4.7bn) security breach by covering 90% of the stolen assets through corporate reserves and insurance funds, though the remaining 10% will take longer to source due to liquidity hurdles. The October 2026 cyberattack on the world’s largest cryptocurrency exchange eclipsed previous records, while the Federal Bureau of Investigation pointed directly to North Korean state-backed actors.

Reserves Deployed to Cover Record Losses

The exchange drew from its Secure Asset Fund for Users, its Futures Insurance Fund, and corporate treasuries to replenish bitcoin, Ethereum, Tether, and seven other widely-traded tokens. Co-CEO Richard Teng confirmed that the platform remains committed to absorbing the full financial impact. “Users will not bear the financial impact of this incident,” Teng stated. While 90% of the funds were rapidly replaced, the remaining 10% consists of less liquid tokens that require more time to acquire in required amounts.

The scale of the heist dwarfs previous incidents in the digital asset sector. The previous record was held by a $1.5bn theft on the Bybit exchange. That earlier attack, much like the Binance breach, was attributed by federal law enforcement to North Korean operators. Founded in China in 2017, Binance serves hundreds of millions of global users who rely on the platform to buy, sell, and trade digital assets.

Federal Investigation Points to State-Backed Hackers

The FBI formally attributed the October 29 attack to North Korea, naming the hacker group TraderTraitor—part of the notorious Lazarus Group—in a Saturday statement. Investigators observed the threat actors immediately converting stolen virtual assets into Ethereum, with expectations that the funds would be laundered through decentralized finance platforms and instant swap services. “The Federal Bureau of Investigation (FBI) is releasing information advising the Democratic People’s Republic of Korea (North Korea) was responsible for the theft of more than $6 billion USD in virtual assets from cryptocurrency exchange Binance, on or about October 29, 2026,” the agency said. North Korea has consistently denied involvement in state-sponsored cyber heists.

Blockchain analysis firms added crucial context regarding the speed and sophistication of the operation. Chainalysis noted that the primary theft executed in roughly 20 minutes, utilizing automated routines to shuffle funds across multiple wallets and obscure the trail. TRM Labs estimated that North Korean state hackers have accumulated $12.8bn across more than 100 separate incidents since 2017.

Binance Restores Phased Withdrawals as Asset Prices Drop

Following the initial suspension of user transactions, Binance began rolling out phased access to liquidity over the weekend. By Sunday, withdrawals for Bitcoin, Ethereum, BNB, XRP, Base, Doge, and Optimism were restored. “First batch network now opened in phase one of withdrawals,” the exchange announced in a post on X, promising subsequent phases once rigorous security checks clear.

The immediate fallout sent ripples across digital asset valuations. Bitcoin prices dropped nearly 5%, Ethereum fell by roughly 6%, and BNB slid nearly 10% following news of the breach. Analysts and security firms continue to probe the vector of the attack; initial investigations pointed to a compromised engineer’s laptop, though subsequent updates from Binance indicated additional points of intrusion and the use of sophisticated self-destruct mechanisms designed to eliminate forensic evidence.

Our commitment remains the same: Binance will fully cover the financial impact of the funds stolen in this incident