Binance says 90% of losses from $6.3bn hack covered as FBI says North Korea behind attack
Cryptocurrency exchange Binance has replaced 90% of the digital assets stolen during a historic security breach, as the FBI attributes the attack to North Korea.
- Core Development: Cryptocurrency exchange Binance has replaced 90% of the digital assets stolen during a historic security breach, as the FBI attributes the attack to North Korea.
- Beat Context: Categorized under Business with independent corroboration.
- Reporting Depth: 3 minute analytical read synthesized from verified newsroom sources.
Cryptocurrency exchange Binance has announced that it has replaced 90% of the digital assets stolen during a historic security breach on its platform, while the FBI formally attributed the cyberattack to a state-sponsored hacking group from North Korea. The incident, which unfolded late in the week, saw billions in virtual currency drained from user wallets in what analytics firms and law enforcement agencies have described as the largest crypto theft in history. As the exchange moves to restore normal operations, the fallout has triggered wider turbulence across digital asset markets and drawn intensive scrutiny from international investigators.
According to Themunicheye, the exchange revealed that the remaining 10% of unreplaced tokens are less liquid assets, meaning they may take longer to source in the necessary amounts. Co-chief executive officer Richard Teng emphasized that the company would absorb the full financial impact. Binance will absorb the financial impact of these stolen funds, not our users,
the company stated in updates published across social media.
Media additions
The breach, first disclosed on Thursday, forced the platform to suspend user withdrawals while containment measures were deployed. According to Yahoo Finance UK, the platform's leadership confirmed that withdrawals remain on track to resume on Sunday. The market reaction to the initial breach was swift and severe, with Bitcoin dipping to a six-week low while other major tokens suffered steep retreats.
Law enforcement intervention quickly narrowed in on state actors. As reported by Nikkei Asia, the FBI issued an advisory attributing the operation to TraderTraitor, a unit widely regarded as part of North Korea's Lazarus Group. The bureau noted that the attackers moved rapidly to convert the stolen holdings into Ethereum. The FBI stated that it observed the actors preparing the funds for further laundering stages through decentralized finance and instant swap services.
| Entity / Source | Stolen / Impact Estimate | Attribution / Details |
|---|---|---|
| Binance | $6.3bn | Compromised employee laptop and additional breach points; 90% replenished. |
| Chainalysis | $6.4bn | High confidence linking attack to North Korean actors. |
| FBI | $6+ billion | Formal attribution to state-sponsored unit TraderTraitor. |
Binance executives detailed the composition of the funds used to make customers whole. Money was drawn from the platform's corporate treasury, a portion of its Futures Insurance Fund, and part of the $1 billion Secure Asset Fund for Users, a bitcoin reserve intended to safeguard clients during security failures. Transparency measures included publishing proof-of-reserve snapshots for major assets including Bitcoin, Ethereum, Tether, and seven other widely traded cryptocurrencies, as outlined by BBC coverage.
Investigators continue to piece together how the breach occurred. Binance initially pointed toward a compromised engineer's laptop that granted access to service containers and unauthorized withdrawals, though subsequent updates indicated that additional points of compromise were discovered during the forensic review. Security experts cited by BBC noted that modern threat actors increasingly target internal administrative systems rather than relying solely on traditional vault key compromises.
As international agencies urge virtual asset service providers to block transactions connected to the suspect wallet addresses identified by the FBI, attention now turns to the weekend deadline.
How significant is this development?
Contribute your assessment to the aggregated reader sentiment ledger.
Frequently Asked Questions
Key questions answered in this reportWhat is the key development in: Binance says 90% of losses from $6.3bn hack covered as FBI says North Korea behind attack?
Cryptocurrency exchange Binance has replaced 90% of the digital assets stolen during a historic security breach, as the FBI attributes the attack to North Korea.
Why is this Business development significant for the UK?
This report covers critical events in our Business beat. Independent reporting monitors related UK statements, regulatory shifts, and public responses as further verified details emerge.
How was this reporting corroborated and verified?
Newsarchy UK compiles and cross-references reporting from primary reporting from BBC and cross-checked wire reports. All coverage adheres to published editorial standards.
When was this report published?
This briefing was published on November 1, 2026 and is permanently cataloged in the Newsarchy UK Business archives.
