Binance says 90% of stolen assets replenished as FBI attributes attack
Binance says it has replenished 90% of assets stolen in the October security breach. The FBI attributes the attack to North Korean activity known as TraderTraitor.

Binance said on October 31 that it had replenished 90% of the assets affected by the October 29 security breach, up from about 80% in its previous update. The company earlier estimated the theft at roughly $6.3 billion and says it will bear the financial impact. The figures are Binance’s statements and have not been independently verified.
What has been replenished
The exchange says BTC, ETH, USDT, BNB, SOL, USDC, XRP, USD1, RLUSD and ZEC are fully backed, while the remaining affected tokens are less liquid and will take longer to buy. It says the replenishment draws on corporate funds, part of the SAFU emergency fund and part of the futures insurance fund. Replacing assets is not the same as recovering stolen funds; frozen funds are not necessarily recovered either.
What the reserve snapshot shows
Binance says it updated its proof-of-reserves page with a snapshot taken at 00:00 UTC on October 31. The full zero-knowledge proof is expected by November 3 UTC, when users holding the ten named assets should be able to verify their balances against that snapshot. A snapshot describes one point in time, not continuously available reserves, and the verification was not yet available in the October 31 update.
Withdrawals: still a target, not confirmed
Binance said on October 31 that it remained on track to reopen withdrawals on November 1, with details to follow. The update did not confirm a reopening or guarantee a schedule for each asset or region. Check the current status in Binance’s official app or website, and disregard messages asking for passwords or verification codes.
FBI identifies the suspected attackers
On October 31, the FBI attributed the theft to North Korean activity it calls TraderTraitor and published addresses linked to the stolen assets. It says the actors have converted assets primarily to ETH and may use decentralized finance and instant swaps to launder them. In a November 1 X reply, Adam Healy, who describes himself as a security-company co-founder, said the key question is whether bridges and swap services refuse those funds once Binance reopens withdrawals. The FBI’s attribution is an investigative finding, not a court judgment.
Sources
YOUR BINANCE REFERRAL CODE
- 20% Spot Trading Rebate
- 20% Futures Trading Rebate
- Up to $100 Sign Up Rewards
Available rewards are confirmed during registration.
We may earn a commission when you use this link, at no extra cost to you. Terms and regional restrictions apply.