Yesterday 16:16

Binance announced the recovery of 90% of the assets stolen in the $6.3 billion cyberattack

Ana Maria Eftene

31 October 2026, 16:16

International

K.unshu / Shutterstock.com

Always see our news on Google

Binance, the world’s largest cryptocurrency trading platform, announced Saturday that it had recovered approximately 90% of the assets stolen in a cyberattack estimated at more than $6.3 billion. The company said the losses would not be passed on to users.

The remaining 10% consists of less liquid tokens, which may be more difficult to purchase in the quantities required. Binance said it would absorb the financial impact of the heist and would also use the Secure Asset Fund for Users (SAFU), a fund established in 2018 to protect customers’ assets in extreme situations, such as security breaches.

Following the attack, deposits and withdrawals were suspended. Binance said it was on track to resume withdrawals on Sunday, November 1, 2026, and would provide details after confirming the procedures.

The incident is considered the largest heist in the history of cryptocurrency. By comparison, in February 2025, digital coins worth approximately $1.5 billion were stolen from the Bybit platform.

ข,

Context: Binance froze some of the funds and requested assistance from the authorities, while the US opened an investigation into possible North Korean involvement

After the cyberattack was announced, Binance stated that it had temporarily suspended deposits and withdrawals and that, in order to limit the theft, approximately $3 billion had been frozen on the blockchain. At the same time, Tether blocked assets worth around $1.6 billion, while Circle announced the freezing of approximately $800 million. The platform said it was trying to limit the losses together with partners and authorities.

Meanwhile, President Donald Trump said that the authorities were checking whether the robbery had been carried out by North Korean hackers, without making an official attribution. Binance said it was working with the FBI and the US Secret Service, while blockchain analytics firms TRM Labs and Chainalysis identified the “TraderTraitor” group as a possible perpetrator. In its internal investigation, Binance reportedly identified several points of access and mentioned the use of a self-destruct mechanism to erase traces; Co-CEO Richard Teng indicated that the incident did not appear to be the work of a single person.