Binance has replenished 90% of the assets stolen during a record $6.3 billion hack of its platform, the exchange announced. The FBI has attributed the breach to a group backed by North Korea.
The remaining 10% of tokens are less liquid and may require additional time to reacquire, Binance said in a Saturday post on X. Co-CEO Richard Teng separately pledged that the firm is “committed to covering the remaining 10%” and emphasized that “users will not bear the financial impact of this incident.”
Binance suspended customer withdrawals following the breach, though its latest update indicates withdrawals are on track to resume on Sunday.
The announcement coincided with the FBI’s Saturday confirmation of earlier findings by private investigators and analysts, identifying the North Korea-affiliated group TraderTraitor as responsible for the hack.
TraderTraitor is believed to operate under the Lazarus Group umbrella, which gained international notoriety in 2014 after being accused of hacking Sony Pictures in retaliation for “The Interview,” a film satirizing North Korean leader Kim Jong-un.
“The Federal Bureau of Investigation is releasing information advising that the Democratic People’s Republic of Korea (North Korea) was responsible for the theft of more than $6 billion USD in virtual assets from Binance on or about October 29, 2026,” the agency stated.
The FBI added that it observed “TraderTraitor actors” converting stolen assets into Ethereum, and expects those funds to be laundered further through decentralized finance platforms and instant swap services.
The agency urged private-sector entities to block transactions involving addresses used by TraderTraitor actors to launder the stolen assets.
Teng said on Friday that the breach constituted a “complex attack” involving a compromised laptop and malicious software designed to erase evidence of its activity, complicating tracing and investigation.
Binance said it allocated approximately $6.34 billion in company funds to cover the losses.
“Our commitment remains the same: Binance will fully cover the financial impact of the funds stolen in this incident,” the company said.
Funds used to repurchase the tokens were drawn partly from its $1 billion Secure Asset Fund for Users—a bitcoin reserve held to protect customers during security breaches—along with portions of its Futures Insurance Fund and corporate treasury, the company said on X.
The Binance attack follows growing concerns among observers that rapidly advancing artificial intelligence models could compromise cryptographic standards and IT security protocols.
Bitcoin fell nearly 5% following news of the hack, while Ethereum dropped roughly 6% and Binance’s native token, BNB, tumbled almost 10%.
The scale of the breach highlights North Korea’s ability to generate illicit revenue despite extensive international sanctions over its nuclear and missile programs.
