AAVE/USDT AAVE / Tether · Binance Spot

Binance says it has replenished approximately 90% of the assets affected by the theft, up from about 80% in its previous update. The exchange says purchases of less-liquid tokens continue, using its own funds and portions of two protection funds. Withdrawals are still expected to resume on Sunday. A new reserves snapshot has been taken, but the complete verification proof is expected on Tuesday. Replenishment and the planned restart remain distinct from recovering stolen funds.

The FBI attributes the theft of more than $6 billion USD from Binance to North Korea’s TraderTraitor actors. In its October 31 alert, the bureau says investigators observed stolen assets being converted primarily into ETH and expect further laundering through DeFi and instant swaps. It urges crypto infrastructure providers to block transactions linked to the listed addresses. The alert concerns the October 29 theft.

Binance says it will cover all losses from the hack, with roughly $3 billion in affected assets frozen, AP reports. Withdrawals remain suspended; the exchange expects them to resume within a day or two. TRM estimates approximately USD 6.36 billion left Binance wallets and attributes the attack to North Korea’s TraderTraitor unit with high confidence. Binance has not confirmed the attackers’ identity. Its investigation has uncovered additional breach points beyond the initially suspected compromised laptop.

Binance says it has set aside more than $6.34B in company funds after the hot-wallet theft, including $5B in the stolen token types. Its October 30 update says purchases of the remaining assets continue and withdrawals remain suspended. The exchange targets a phased restart subject to security checks and plans Proof of Reserves results by Monday 2026-11-02. These are commitments and targets, not confirmed restoration or recovery.