Binance has reserved more than $6.34 billion in company funds to cover losses from this week's security breach, the exchange said on October 30. The company, one of the world's largest cryptocurrency trading platforms, said it has begun recovering affected assets for users while continuing to trace funds with law enforcement and industry partners.

According to Binance, $5 billion of its reserves already matches the same cryptocurrencies involved in the incident. The exchange is purchasing additional tokens to cover the remaining amount and plans to publish updated proof of its holdings.

In a post on X, Binance wrote:

Binance has begun recovering affected assets for users and continues to work with law enforcement, issuers, blockchain intelligence firms and industry partners to trace, freeze and recover additional funds. The company has already publicly committed to cover losses through… pic.twitter.com/UqtBd37Fpj

— Binance (@binance) October 30, 2026 (post on X)

Company Funds Committed to Cover Shortfalls

The exchange said it would use company resources to cover confirmed shortfalls resulting from the breach, meaning losses will be borne by the company rather than passed on to customers. How those shortfalls are covered is central to how users experience the incident: absorbing losses at the company level is intended to prevent the breach from reducing customer balances. The latest commitment follows an earlier pledge to protect users after unauthorized withdrawals affected roughly $6.3 billion in assets.

The security incident took place on October 29 and involved transfers across several blockchains. Blockchain investigators have linked the attack to North Korean hackers, although Binance has not publicly confirmed who carried it out. Attributions of this kind follow a familiar pattern: investigators have repeatedly tied major cryptocurrency thefts in recent years to North Korean-linked groups.

Exchange Buys Tokens to Fill Shortfalls

Binance is sourcing the outstanding amount through public trading markets and direct transactions with counterparties, commonly known as over-the-counter (OTC) deals. The purchases are intended to replace the affected tokens with the same assets, rather than substituting other cryptocurrencies or cash. Sourcing identical assets, rather than substitutes, is meant to return affected users to the holdings they had before the incident. The company has not named the specific tokens it is acquiring.

It noted that some of the affected tokens have limited trading activity, making large purchases difficult. Direct trades arranged outside regular exchanges also require settlement time, and Binance has therefore not provided a completion date for the process.

Industry Partners Freeze $3 Billion

Industry partners have frozen approximately $3 billion in assets linked to the breach, according to Binance. Freezing stolen cryptocurrency does not guarantee recovery, however, as the assets still require checks before they can be returned.

The exchange stressed that the frozen sum is separate from the more than $6.34 billion reserved for customer losses. Those reserved funds remain subject to ongoing recovery and verification.

Binance said it is coordinating with token issuers, blockchain intelligence firms and authorities to secure additional assets. It has not specified how much of the frozen amount has already been returned.

Withdrawal Checks and Reserve Verification

Binance earlier paused withdrawals while examining its systems. It said deposits remained available throughout the review and that its investigation had found no evidence of leaked wallet private keys. The exchange has not announced a firm date for restoring all withdrawals.

Separately, prediction market platform Polymarket resumed trading this week after a security breach involving an outside service provider. The two incidents have not been linked, and both platforms have said they will cover affected users.

Binance plans to release a technical report after completing its investigation. The company also said its next Proof of Reserves update — a periodic disclosure through which exchanges demonstrate that they hold the assets reported on behalf of customers — will allow the public to check user assets against its reported holdings. Independent scrutiny of such disclosures intensified across the industry after the 2022 collapse of FTX, which revealed that customer assets fell short of what the exchange had reported.

In the meantime, the developments to track include when all withdrawals are restored, how quickly the remaining token purchases are completed, and how much of the frozen $3 billion ultimately clears verification and is returned.

Based on reporting by Blockonomi.