Introduction
Binance has achieved a major milestone in its response to the massive crypto heist, reporting that roughly 90% of the $6.3 billion in stolen assets are now covered. The exchange aims to restart user withdrawals this Sunday, drawing on its emergency reserves and insurance mechanisms to protect account holders.
What Happened
The world's leading crypto exchange disclosed that approximately $6.3 billion in digital assets were taken from its hot wallets in what's already become the biggest crypto theft on record. Initial reports pointed to a compromised engineer's laptop, though later comments from company leadership suggested a more intricate breach. The FBI has since laid blame on North Korean state actors, who allegedly funneled the stolen funds through Ethereum conversions. Blockchain analysis firm TRM Labs also tied the incident to previous North Korea-linked attacks, including the Bybit and KelpDAO hacks earlier this year.
- Around $6.3 billion in token assets were stolen from Binance hot wallets in a record-breaking crypto theft.
- The FBI attributes the attack to North Korean actors.
- TRM Labs connects the breach to prior North Korea-linked crypto heists, including the Bybit and KelpDAO incidents.
Why This Matters
Beyond the eye-popping dollar figure, the incident spotlights the persistent security risks confronting major crypto platforms and how exchanges must handle such crises. Binance's choice to absorb the loss rather than shift costs to users sets a notable precedent for industry accountability. The staggered recovery timeline also reflects the technical hurdles of tracing and retrieving funds across complex blockchain networks.
Key Takeaways
- Binance has restored backing for about 90% of the stolen $6.3 billion, with top tokens including BTC, ETH, USDT, BNB, SOL, USDC, XRP, USD1, RLUSD, and ZEC now at 100% coverage.
- The exchange is funding the recovery through its Secure Asset Fund for Users, a portion of its Futures insurance fund, and its corporate treasury.
- Withdrawals are scheduled to resume Sunday, pending final security checks and confirmation.
- Approximately 10% of the stolen tokens, mostly outside the top 10, remain less liquid and may take additional time to source.
- The FBI has officially attributed the hack to North Korean actors, who moved assets through Ethereum laundering networks.
Conclusion
Binance's rapid response covering 90% of the heist within days and planning a full recovery signals its commitment to user protection despite one of the biggest thefts in crypto history. As the exchange works toward 100% asset coverage and Sunday's withdrawal restart, the case reinforces the importance of robust security frameworks and transparent reporting in the digital asset ecosystem. Readers should watch for further updates on the remaining 10% of tokens and any new security measures Binance implements post-incident.








Discussion
Join the conversation
Thoughtful reactions, questions, and follow-up ideas help shape the next story.