Binance states it has successfully restored ninety percent of the digital assets taken during Thursday’s $6.3 billion hack and stays on schedule to restart withdrawals on Sunday, November 1.
This percentage has increased from roughly eighty percent in the prior status report, with the trading platform confirming that user balances for bitcoin, ether, USDT, BNB, SOL, USDC, XRP, USD1, RLUSD, and ZEC are fully backed.
The remaining ten percent is comprised of less liquid coins that Binance explains might require additional time to acquire in the necessary volumes. Binance notes it is purchasing them via open markets and over-the-counter transactions, collaborating with industry allies to finalize the acquisitions.
Binance previously allocated upwards of $6.34 billion in company assets, which incorporates $5 billion stored in the impacted cryptocurrencies. Those funds were kept separate from approximately $3 billion in compromised tokens that partner entities managed to freeze.
“Binance will shoulder the monetary consequences of these stolen assets, not our customers,” according to the platform’s update.
This replenishment addresses a deficit in the reserves supporting user accounts. An evaluation by CoinDesk regarding earlier reserve disclosures by Binance revealed that the wallets compromised in the incident were among those the exchange identified as backing client funds.
Binance mentioned that the replacement capital comes from corporate reserves alongside a segment of its futures insurance fund, with a limited allocation of the Secure Asset Fund for Users, or SAFU, scheduled for the upcoming twenty-four hours.
This reserve usually absorbs deficits stemming from liquidated trading positions and helps minimize forced position reductions for other traders, a process called auto-deleveraging. Binance clarified it only shifted the surplus amount exceeding its mandated threshold, ensuring the remaining reserve still fulfills risk-management guidelines.
The company also pledged to rebuild SAFU, its emergency protection fund for users, back to approximately $1 billion.
The security inquiry remains active. Co-CEO Richard Teng mentioned on Friday that security analysts discovered additional vulnerabilities beyond the initially suspected compromised employee laptop, while U.S. President Donald Trump commented on the intrusion, stating “we don’t know” if North Korea was responsible, and adding that the administration is “looking at that.”
Blockchain intelligence firms TRM Labs and Chainalysis have linked the breach to TraderTraitor, a hacking collective connected to North Korea.
Binance additionally released a fresh proof-of-reserves statement indicating backing percentages at one hundred percent or higher for the specified tokens, captured at midnight UTC on October 31.
The complete cryptographic validation, allowing users to independently verify that their accounts are accounted for within the reported liabilities of Binance, is anticipated by November 3.
Originally published at https://www.coindesk.com/business/2026/10/31/binance-says-it-has-replaced-90-of-stolen-crypto-after-massive-usd6-3-billion-breach.
