Crypto firm Binance covers 90% of losses after $6.3bn hack
Two analytics firms say they have robust intelligence pointing to a North Korean state-backed group as the likely culprit.
Binance, the world's largest cryptocurrency exchange, says it has covered 90% of the $6.3bn (£4.7bn) assets stolen in a hack on Thursday.
The remaining 10% may take longer to source in the required amounts, the company added.
Binance has consistently pledged to cover 100% of the losses from what is suspected to be crypto's biggest hack on record and said it has set aside more than $6.34bn in company funds to do so.
"Binance will absorb the financial impact of these stolen funds, not our users," the company said in a statement on Saturday.
It said it had replenished the assets using various funds and its own corporate treasury.
All holdings of the cryptocurrencies bitcoin, ethereum and Tether are covered, along with seven other widely-traded crypto assets, the company said.
From Bitcoin to Binance: Crypto terms and what they mean
The company said its next goal is resuming withdrawal services for users, saying it remained on track to reopen withdrawals on Sunday 1 November and would provide a further update once details were confirmed.
The hack is believed to be the largest in history, eclipsing the record of a $1.5bn heist on the Bybit exchange in 2025.
Binance's initial investigation suggested an engineer's laptop was compromised, which allowed access to unauthorised withdrawals, but a later update said they had uncovered "additional points of breach".
Richard Teng, Binance's co-chief executive officer, said the hack was carried out by more than one person, and the hackers used sophisticated methods to hide their tracks, such as a "self-destruct mechanism".
On Friday, the company said it had frozen around $3bn of stolen assets after working with law enforcement, intelligence firms and partners.
The investigation is ongoing, it added. The US Secret Service said on Friday it is "working around the clock" with private sector partners "to identify, freeze, trace, and recover funds" stolen from Binance.
Two major blockchain analytics firms say they have robust intelligence pointing to a North Korean state-backed group called The Lazarus Group, also known as TraderTraitor, as the likely culprits.
The Federal Bureau of Investigation (FBI) said North Korea was responsible for the theft of $1.5bn on the Bybit exchange last year.
North Korea has always denied involvement in these attacks.
Binance, founded in China in 2017, lets users buy, sell and trade digital assets - it is estimated to have hundreds of millions of users worldwide.
Crypto is a digital asset, which doesn't exist physically and is instead accessed via digital wallets or computers.
Who could be behind the Binance hack and what we know so far
Crypto giant Binance attempting to recover $6.3bn stolen in hack linked to North Korea
Why North Korea's 'elite' hackers are the prime suspect in major Binance hack
