Binance $6.3B Hack: Asset Replenishment Reaches 90%, Withdrawals Set to Resume Sunday
nashnova research
After suffering the largest crypto theft on record at $6.3 billion, Binance says it has replenished 90% of stolen assets from its own reserves and plans to reopen withdrawals Sunday — a real-time stress test of its solvency pledge.
How much was stolen — and how did it happen?
On October 29, hackers breached Binance's hot wallet and stole $6.3 billion in crypto — believed to be the largest cryptocurrency theft ever recorded.
Analysts attribute the attack to a North Korean hacking group. Binance initially pointed to a compromised DevOps engineer's laptop, then disclosed "additional intrusion vectors" without elaborating.
This means → the full attack path remains unknown, and there may be more than one security gap.
How far along is the replenishment?
Binance's latest update puts asset replenishment at 90%, up from the 80% disclosed earlier.
User holdings in Bitcoin, Ethereum, USDT, BNB, SOL and other major tokens are now fully covered. The remaining 10% consists of less liquid, smaller tokens that Binance is acquiring through open-market purchases and OTC deals.
In plain terms = most users' mainstream holdings are whole again. What's left are thinly traded tokens that take time to buy in sufficient volume.
Where is the money coming from?
Binance had pre-earmarked over $6.34 billion in corporate funds, roughly $5 billion of which is already held in the relevant cryptocurrencies.
Partners have frozen approximately $3 billion in stolen assets, providing an additional buffer.
Binance stated explicitly: "Financial losses from the theft will be borne by Binance and will not be passed on to users." This means → even if frozen assets are never fully recovered, Binance has pledged to cover the gap itself.
Sunday's reopening — what is the real test?
Binance is holding to its November 1 (Sunday) timeline to reopen withdrawals. Co-CEO He Yi and founder Changpeng Zhao have both publicly committed to full reimbursement.
A CoinDesk review found the compromised wallet was one of the addresses Binance had listed as backing user assets. This reflects a weak point in the platform's asset-segregation and custody architecture.
In plain terms = the moment withdrawals reopen, a wave of users will try to pull funds out simultaneously. Whether they can do so smoothly and quickly is the real stress test of Binance's "full reimbursement" promise.
市场有风险，内容仅供研究参考，不构成投资建议。