Binance Hack: FBI Blames North Korean Group; 90% Replenished

The FBI has blamed the theft of more than $6 billion in crypto assets from Binance on TraderTraitor, a North Korean-linked hacking group. The Binance hack investigation has also drawn attention to the 2025 Bybit theft, which the FBI has linked to the same group. Investigators say some stolen funds are being converted into ETH and moved through DeFi platforms and instant-swap services. The FBI, US Secret Service and IRS Criminal Investigation published wallet addresses and urged crypto platforms to block related transfers. On-chain monitoring has tracked about $25 million flowing to THORChain, with other funds sent to SunSwap and Bitget Swap. Transfers continued for around 31 hours and showed signs of automation, underscoring the risk that stolen funds may keep moving across services. Binance says it has replenished about 90% of affected assets using company funds, its futures insurance fund and SAFU. Ten major tokens, including BTC, ETH, USDT, BNB and SOL, reportedly have at least 1:1 reserve coverage; Binance is still sourcing less-liquid assets. Earlier on-chain data showed 7,500 BTC transferred from SAFU, with 7,500 BTC remaining at the address. Binance took a new proof-of-reserves snapshot on 31 October and expects to publish a full cryptographic report on 3 November. Withdrawals were still undergoing security upgrades and testing, with restoration subject to official updates. Traders will be watching fund recovery, withdrawal availability and proof of reserves as indicators of Binance’s operational stability and market confidence.
Bearish
The Binance hack is a near-term confidence risk for Binance and, by extension, may weigh on BNB sentiment. Reports of more than $6 billion stolen, continued laundering activity and temporarily restricted withdrawals can prompt traders to reduce exposure to exchange-related risks. Such security incidents have historically increased volatility and led users to move assets off affected platforms, even when broader crypto prices are not directly affected. The reported replenishment of about 90%, 1:1 coverage for major tokens and plans to publish proof of reserves help limit the downside risk. However, remaining asset recovery, the status of withdrawals and verification of reserves are important unresolved factors. In the short term, negative headlines or delays could renew selling pressure on BNB; credible recovery updates and restored services could help confidence stabilize. The event does not by itself establish a lasting change in BNB’s fundamentals, so longer-term price effects will depend on Binance’s response and whether users regain confidence.