Binance’s crypto asset recovery effort has reached a reported 90% coverage of assets affected by this week’s massive cyberattack, the exchange said on Saturday, October 31, 2026. The update, posted on X, follows a breach involving about $6.3 billion in client assets .
Binance expects withdrawals to resume by Sunday . Its Saturday statement described the affected assets as “covered,” while earlier updates detailed both efforts to recover stolen cryptocurrency and the use of company funds to cover customer losses.
Binance’s crypto asset recovery combines frozen funds and customer coverage
Binance estimated that around $3 billion of the affected cryptocurrency had been frozen on blockchain networks. Stablecoin issuers Circle and Tether moved to freeze funds after the attack, while investigators tracked the movement of stolen assets.
The exchange initially pledged to cover losses through its Secure Asset Fund for Users (SAFU) and company resources. It later stated that it had reserved more than $6.3 billion from its own funds. SAFU is a roughly $1 billion emergency reserve intended to protect customers following security breaches.
Binance’s initial investigation indicated that attackers accessed its withdrawal systems and made unauthorized transfers from exchange wallets. The exchange said it had found no evidence that the wallets’ private keys were leaked.
Alongside Binance’s crypto asset recovery effort, TRM Labs and Chainalysis attributed the attack to TraderTraitor, a North Korean state-backed hacking group.
Article produced with the assistance of artificial intelligence and reviewed by the editorial team.
