Binance said on Saturday that it had replenished 90% of the assets stolen in its $6.3 billion hack, up from 80% a day earlier, and that the exchange remains on track to resume withdrawals on Sunday.

A spokesperson told Cointelegraph that Binance is funding the replacement with a combination of its corporate treasury, a partial deployment of its Secure Asset Fund for Users (SAFU) and a portion of its futures insurance fund. SAFU, established by the exchange in 2018, is an emergency insurance reserve earmarked for protecting user funds in a crisis.

“Binance will absorb the financial impact of the stolen funds, not users,” the spokesperson said, adding that the insurance fund would remain above required risk management levels.

The theft, which occurred on Thursday, is the largest cryptocurrency hack on record. Blockchain analytics firm TRM Labs has since attributed the attack to TraderTraitor, a hacking group linked to North Korea. North Korea-linked hacking units have been blamed by investigators and government agencies for a series of major cryptocurrency thefts in recent years.

On Friday, Binance said it had set aside $6.34 billion to cover losses, including $5 billion in the affected cryptocurrencies. Industry partners such as Tether and Circle froze roughly $3 billion in affected assets following the hack — a step made possible by the freeze functions built into their stablecoins — though those funds are separate from Binance's own replacement of the stolen tokens.

Security firm CertiK told Cointelegraph on Friday that it needed more information to verify Binance's claimed $5 billion in replacement cryptocurrencies. Binance has since published a new reserves snapshot, but said the full cryptographic proof is still being generated. Until that proof is complete, outside reviewers cannot independently confirm the figures — the gap CertiK flagged.

“The full zero-knowledge proof takes approximately 40 to 50 hours to generate due to the computational workload,” the exchange's update reads. Zero-knowledge proofs allow an exchange to demonstrate that customer balances are fully backed without exposing individual account data, and they underpin current proof-of-reserves reporting.

In its update posted on X, Binance said customer balances in Bitcoin (BTC), Ether (ETH) and eight other assets were fully backed. The remaining shortfall consists of less liquid tokens, which the exchange continues to buy through market and over-the-counter transactions, according to the update. Completing those purchases, finishing the proof generation and restoring withdrawals on Sunday are the next concrete checkpoints in the recovery.

The spokesperson's statement did not specify how much each funding source contributed or disclose the insurance fund's minimum required balance. It also did not quantify how much of the stolen crypto had been recovered.

Originally reported by Cointelegraph.