Binance Replaces 90% of Assets Stolen in Massive $6.3 Billion Hack

The cryptocurrency exchange Binance announced on Saturday that it has replaced 90% of the assets stolen during a record $6.3 billion platform hack that occurred on October 29, 2026. This massive heist, which the FBI officially attributed to North Korean-backed hackers, has sent shockwaves through global financial markets and highlighted the increasing sophistication of state-sponsored cybercrime.
- Binance set aside more than $6.34 billion in company funds to cover the theft, according to the Guardian.
- The FBI confirmed on Saturday that a North Korean group known as TraderTraitor was responsible for the attack, per NBC News.
- Bitcoin prices fell nearly 5% following the news of the breach, as reported by the BBC.
Who is responsible for the massive theft?
The Federal Bureau of Investigation (FBI) has officially identified a North Korean-affiliated group called TraderTraitor as the perpetrator behind the heist. This group is believed to be part of the Lazarus Group, a notorious hacking unit that has been active for years.
The Lazarus Group gained international attention in 2014 after being accused of hacking Sony Pictures. According to the Guardian, the attack on Sony was reportedly retaliation for the film The Interview, which mocked North Korean leader Kim Jong-un. The FBI stated that it observed TraderTraitor actors converting stolen assets into Ethereum to facilitate further laundering through decentralized finance services.
How did the hackers breach the exchange?
The breach was a highly sophisticated operation that targeted both human and technical vulnerabilities. Binance Co-CEO Richard Teng described the incident as a "complex attack" that utilized specialized tools to evade detection and hinder the subsequent investigation.
Initial reports suggested the breach may have started with a compromised DevOps engineer's laptop. However, the BBC reports that subsequent investigations revealed additional points of breach. Teng noted that the hackers used a "self-destruct mechanism that destroyed tooling and traces as they went," making the digital trail extremely difficult to follow.
How much money was lost and is it being replaced?
The total value of the stolen digital assets reached approximately $6.3 billion, making it the largest single cryptocurrency theft on record. Binance has taken aggressive steps to ensure that its customers do not suffer the financial consequences of the breach.
Binance stated it has already replenished 90% of the stolen assets. The company used a combination of its $1 billion Secure Asset Fund for Users (SAFU), its Futures Insurance Fund, and its own corporate treasury to buy back the necessary tokens. NBC News reports that the remaining 10% consists of less liquid tokens, which may take longer to acquire.
The exchange confirmed that holdings for several major assets, including Bitcoin, Ethereum, Tether, and BNB, are now fully covered. Binance also performed a new snapshot of assets as of 0000 GMT on Saturday to provide proof of reserves for its users.
How are the authorities responding?
Law enforcement agencies across the United States are coordinating a massive response to track the stolen funds. The FBI is working alongside the US Secret Service and the Internal Revenue Service Criminal Investigation division to identify and freeze the assets.
The FBI has issued an urgent request to the private sector to block any transactions involving addresses used by TraderTraitor. According to Yonhap News Agency, investigators have spotted the hackers converting stolen funds into Ethereum and expect further laundering through instant swap services.
While Binance stated its US-facing exchange was not affected, the BBC notes that US authorities still maintain jurisdiction to assist in the global effort to recover the funds.
How each side tells it
The situation involves differing perspectives regarding the technical nature of the breach and the legal protections available to users.
Binance has focused its messaging on stability and the safety of customer funds. The company emphasized its ability to absorb the shock of the loss through its internal reserves.
However, legal experts and market observers have expressed caution. Some experts warned that Binance's promises might not be legally binding under all circumstances. Daniel Tunkel, a lawyer from the London-based Edwin Coe firm, told the BBC that recovery might eventually "come down to what [customers] have been promised in their contracts."
What happens next?
The immediate focus for Binance is the resumption of normal operations. After temporarily suspending all withdrawals following the hack, the exchange stated it was on track to reopen them on Sunday.
On a broader scale, the investigation by the FBI and US Secret Service continues. Authorities are looking to intercept the remaining stolen assets before they are fully laundered through decentralized finance protocols. The scale of this theft also places renewed pressure on the crypto industry to address the growing threat of state-sponsored cyber warfare and the potential impact of artificial intelligence on cryptographic security.
Frequently Asked Questions
Will Binance users lose their money because of the hack?
Binance has stated that it will cover 100% of the losses and that users will not bear the financial impact. The company has already replaced 90% of the stolen assets using its own reserves.Who is believed to be behind the $6.3 billion theft?
The FBI has officially identified a North Korean-linked group called TraderTraitor, which is part of the larger Lazarus Group, as the party responsible for the attack.When can users withdraw their funds again?
While withdrawals were suspended immediately after the breach, Binance indicated in its latest update that it expected to resume user withdrawals on Sunday.SEO Meta Description: Binance says it has replaced 90% of the $6.3bn stolen in a massive hack. The FBI blames North Korea's TraderTraitor group for the record-breaking theft.
URL Slug: binance-6-billion-hack-north-korea-fbi-response
Sources
- 1.theguardian.comBinance says 90% of losses from $6.3bn hack covered as FBI says North Korea behind attack
- 2.nbcnews.comFBI says North Korea was behind the $6.3 billion Binance crypto hack
- 3.bbc.comCrypto giant Binance attempting to recover $6.3bn stolen in hack linked to North Korea
- 4.themunicheye.comBinance says it has replaced 90% of funds lost in record $6.3bn hack
- 5.yna.co.krηΎFBI "ε, κ°μνν 63μ΅λ¬λ¬ νμ·¨ λ°°νβ¦μ΄λ리μ μ ν ν¬μ°©"


