Crypto exchange Binance has completed full coverage of user losses stemming from the October security incident in which approximately $6.3 billion in cryptocurrency was stolen from the exchange’s hot wallets.
The announcement, confirmed on November 12, marks the final step in the company’s pledge to absorb the entire financial impact without any loss to customers.
This comes after the crypto exchange had earlier hinted that it would cover the cost of the stolen funds from the recent security incident.
Register for the next Tekedia Mini-MBA.
Register for Tekedia AI in Business Masterclass.
Join Tekedia Capital Syndicate and co-invest in great global startups.
“We have already set aside more than 100% of the funds needed to cover these losses from Binance’s own resources. We have now replenished approximately 98% of the impacted amount, and we continue to buy the remaining token assets through market and OTC channels”, the company noted.
Rather than waiting for law enforcement agencies to recover the stolen cryptocurrency before restoring customer balances, Binance chose to absorb the financial impact using its own financial resources. The exchange initially committed more than $6.34 billion to the exercise, including approximately $5 billion held in the exact cryptocurrencies affected by the breach.
Its recovery strategy relied on three major funding sources: the Secure Asset Fund for Users (SAFU), a portion of its Futures Insurance Fund, and its corporate treasury. These resources allowed the exchange to purchase replacement tokens and restore the assets backing customer balances.
To complete the process, Binance purchased the outstanding assets through public cryptocurrency markets and over-the-counter transactions, while collaborating with industry partners.
Beyond replacing the stolen assets, Binance also worked with blockchain intelligence companies, law enforcement agencies, and stablecoin issuers to trace and freeze the stolen cryptocurrency.
Approximately $3 billion in assets was frozen through these collaborative efforts, representing a separate recovery initiative from the exchange’s commitment to replenish customer holdings.
The development demonstrates how Binance’s SAFU reserve and corporate treasury became critical instruments in protecting customers during a major security crisis.
It also highlights the financial responsibility large cryptocurrency exchanges may have to assume when security failures threaten the assets entrusted to their platforms.
Binance hack ranks as the largest cryptocurrency heist on record, surpassing the previous high of about $1.5 billion taken from Bybit in early 2025.
Blockchain analysis firms including TRM Labs and Chainalysis estimated the total outflow at roughly $6.36 billion to $6.4 billion across multiple blockchains, with the bulk of the transfers occurring in a short window of about 20 minutes.
Ethereum and Bitcoin accounted for the largest portions of the stolen assets. U.S. authorities and blockchain investigators attributed the attack to TraderTraitor, a North Korea-linked hacking group also associated with the Lazarus Group.
The FBI publicly stated that the Democratic People’s Republic of Korea was responsible for the theft of more than $6 billion in virtual assets. North Korea has denied the allegations.
On November 12 Binance confirmed that 100 percent of user losses had been covered and released an updated Proof of Reserves snapshot, including zero-knowledge proof verification, to demonstrate one-to-one backing of customer assets.
The incident underscored both the scale of state-linked cyber risks facing major crypto platforms and the capacity of a well-capitalized exchange to protect users.
While roughly half the stolen assets remain unrecovered and continue to be tracked as they move through complex laundering paths, Binance’s full reimbursement has removed the direct financial impact from its customers.