Key takeaways Binance replenishes 90% of assets stolen in hack Bitcoin, Ethereum and XRP reserves fully backed again Withdrawals expected to resume Sunday, November 1 Binance says it has replenished approximately 90% of the cryptocurrency stolen during its record $6.3 billion security breach, marking a major recovery milestone as the exchange prepares to restore customer withdrawals. According to Binance's October 31 announcement , the exchange has now fully replaced affected reserves for ten major cryptocurrencies, including Bitcoin, Ethereum, BNB, Solana and XRP. The announcement follows an earlier update showing approximately 80% coverage on October 30. Binance maintains that customers will not bear the financial losses, although the recovery process remains incomplete and withdrawal services have yet to resume. Binance Restores Reserves for Ten Major Cryptocurrencies The exchange confirmed that BTC, ETH, USDT, BNB, SOL, USDC, XRP, USD1, RLUSD and ZEC are now backed by reserves covering 100% of customer balances. The remaining 10% consists of smaller, less-liquid cryptocurrencies that Binance is still working to replace. Based on the reported $6.3 billion theft, that percentage represents roughly $630 million in affected assets, although the exact amount depends on token prices and the exchange's accounting methodology. Binance said it is purchasing replacement assets through both cryptocurrency exchanges and over-the-counter markets, with assistance from industry partners. The exchange previously disclosed that it had set aside more than $6.34 billion to cover the incident, including approximately $5 billion already held in the affected cryptocurrencies. Its earlier security investigation identified a compromised employee laptop as a possible entry point, although investigators later found indications of additional vulnerabilities. Blockchain intelligence firms have attributed the attack to North Korea-linked TraderTraitor hackers, but the investigation remains ongoing. Binance Uses SAFU, Insurance Fund and Corporate Money Binance is financing the replenishment through three sources: its corporate treasury, part of its Futures Insurance Fund and a partial deployment of its Secure Asset Fund for Users, known as SAFU. The company said the SAFU deployment would be completed over the following 24 hours and pledged to restore the emergency fund to approximately $1 billion. It also stated that enough money would remain in its futures insurance fund to satisfy regulatory requirements. The distinction between replacing stolen assets and recovering them is important. Binance reported that approximately $3 billion in attacker-linked cryptocurrency had already been frozen through cooperation with stablecoin issuers and other blockchain companies. However, frozen assets are not necessarily returned to the exchange, and replenishment involves acquiring replacement tokens rather than retrieving the original stolen funds. Coinpaper previously documented how the attack began with XRP , when hackers transferred approximately $296 million from five wallets before targeting Bitcoin and Ethereum. Another investigation showed how Ripple froze RLUSD , demonstrating the role stablecoin issuers can play in containing cryptocurrency theft. Binance Targets November 1 Withdrawals as Reserve Audit Continues Binance also published a new proof-of-reserves snapshot taken at 00:00 UTC on October 31. The snapshot reflects updated customer asset coverage, but the full zero-knowledge cryptographic proof will take another 40 to 50 hours to generate. Binance expects that process to be completed by November 3, allowing customers to verify that their balances are included in the exchange's reported reserves. Meanwhile, withdrawal services remain temporarily suspended as additional infrastructure and security checks continue. The company says it is on track to reopen withdrawals on Sunday, November 1, subject to successful completion of those checks. The incident has already affected cryptocurrency markets, with BNB falling below $700 and Bitcoin briefly losing the $77,000 support area. Coinpaper's Bitcoin coverage also documented approximately $1.53 billion in cryptocurrency liquidations following the breach.
