Binance Fully Replenishes $6.34 Billion in Customer Assets Following Record Crypto Hack - FinanceFeeds
Binance has fully replenished $6.34 billion in customer assets following a record cryptocurrency hack, using its own corporate resources and insurance funds to cover the losses.
The exchange confirmed the completion of the replenishment process on November 12, 2026, and published an updated proof-of-reserves snapshot covering 198 tokens.
The incident, attributed to a North Korean-linked hacking group, remains under investigation, with the U.S. Department of Justice having frozen $2.7 billion in stolen funds and authorized the seizure of more than $1.2 billion.
Binance began replacing stolen assets shortly after the October 29 attack, initially allocating more than $6.34 billion to address the losses.
By October 31, the exchange had replenished approximately 90% of the affected holdings, including major cryptocurrencies such as Bitcoin, Ethereum, BNB, Solana, XRP, USDT and USDC.
The remaining assets included less liquid cryptocurrencies that required additional purchases through exchanges and over-the-counter trading channels.
On November 4, Binance reported that replenishment had reached approximately 98%, with the final outstanding assets requiring more time to acquire.
The company has now confirmed that the process is complete.
Binance’s November 12 proof-of-reserves snapshot covers 198 tokens, substantially expanding the scope of its earlier disclosures.
The exchange said the complete zero-knowledge cryptographic proof would require approximately 40–50 hours to generate, after which customers could independently verify reserve backing of at least 1:1 for covered assets.
Binance also committed to rebuilding its SAFU emergency reserve to approximately $1 billion.
Withdrawal services continue reopening in phases, meaning completion of asset replenishment does not necessarily indicate that every network and cryptocurrency withdrawal service has been fully restored.
DOJ Secures Seizure Authorization
The replenishment announcement follows significant developments in the U.S. investigation into the Binance breach.
On November 12, the Department of Justice confirmed that government agencies and private-sector partners had frozen more than $2.7 billion in stolen cryptocurrency.
Federal authorities also obtained court authorization to seize or restrain more than $1.2 billion of those assets.
The FBI attributed the original theft to TraderTraitor, a North Korean military-linked hacking group associated with previous cryptocurrency attacks.
Investigators continue tracing stolen funds as the attackers attempt to move assets through cryptocurrency exchanges, blockchain bridges and mixing services.
Importantly, Binance’s $6.34 billion replenishment does not mean the stolen cryptocurrency has been recovered.
The exchange has replaced affected customer holdings using its own available resources, while law enforcement continues pursuing the assets controlled by the attackers.
The distinction is significant because frozen or seized funds remain subject to legal proceedings and potential recovery arrangements.
The incident has intensified scrutiny of cryptocurrency exchange custody practices, internal security controls and reserve transparency.
Although Binance has completed its announced replenishment process, the longer-term financial impact will depend partly on successful asset recovery, the restoration of affected services and the rebuilding of emergency reserves.
Related
