Crypto firm Binance covers 90% of losses after $6.3bn hack

Updated 1 November 2026.

Key points

• Binance, the world's largest cryptocurrency exchange, notes it has covered 90% of the $6.3bn (£4.7bn) assets stolen in a hack on Thursday.
• The Federal Bureau of Investigation (FBI) remarked on Saturday that North Korea was responsible for the attack.
• Binance, founded in China in 2017, lets users purchase, sell and trade digital assets – it is estimated to have hundreds of millions of users worldwide.
• Speaking to reporters on Saturday night, US President Donald Trump remarked, external the US is still unsure who the culprits are.
• The US Secret Service remarked on Friday it is "working around the clock" with private sector partners "to identify, freeze, trace, and recover funds" stolen from Binance.

For context, the remaining 10% may take longer to source in the required amounts, the firm went on.

Binance has consistently pledged to cover 100% of the losses from what is suspected to be crypto's biggest hack on record and remarked it has set aside more than $6.34bn in business funds to do so.

"Binance will absorb the financial impact of these stolen funds, not our users, " the firm stated in an official note on Saturday.

After they were suspended after the hack, in an update on Sunday, Binance remarked withdrawals had been restored on a number of of its networks. It previously remarked withdrawals would be resumed in phases.

Meanwhile, the Federal Bureau of Investigation (FBI) remarked on Saturday that North Korea was responsible for the attack.

In practice, the FBI remarked it had observed hackers converting stolen assets into a type of cryptocurrency called Ethereum and that expectations are that the assets will then be converted again using decentralised finance and instant swap services.

Two analytics firms previously informed the BBC they had robust intelligence pointing to North Korean state-backed hacking unit the Lazarus Group, additionally known as TraderTraitor – which was specifically named by the FBI – as the probable culprits.

"We're learning regarding it. We don't know if it's North Korea – but if it is, we'll talk to North Korea regarding it, " he stated.

Binance remarked it had replenished the stolen assets using various funds and its own corporate treasury.

All holdings of the cryptocurrencies bitcoin, Ethereum and Tether are covered, along with seven other widely-traded crypto assets, the firm stated. From Bitcoin to Binance: Crypto terms and what they mean.

Notably, the hack is believed to be the largest in history, eclipsing the record of a $1.5bn heist on the Bybit exchange in 2025 – for which the FBI additionally stated North Korea was responsible. North Korea has always denied involvement in these attacks.

Binance's initial investigation suggested an engineer's laptop was compromised. It allowed access to unauthorised withdrawals, but a afterwards update stated they had uncovered "additional points of breach".

Richard Teng, Binance's co-chief executive officer, remarked the hack was carried out by more than one person, and the hackers employed sophisticated methods to hide their tracks, such as a "self-destruct mechanism".

On Friday, the firm stated it had frozen around $3bn of stolen assets after working with law enforcement, intelligence firms and partners.

Meanwhile, the investigation is ongoing, it continued. The US Secret Service remarked on Friday it is "working around the clock" with private sector partners "to identify, freeze, trace, and recover funds" stolen from Binance.

Crypto is a digital asset. It doesn't exist physically and is instead accessed via digital wallets or computers.

Taken together, the developments around crypto firm Binance covers 90% of losses after $6.3bn hack point to a situation that is still moving, and the coming days should bring more clarity.