Binance Sets Aside $6.34B to Cover Hack Losses, CEO Says 'Your Assets Are Safe'

Introduction

Binance’s CEO Richard Teng announced that the exchange will cover all losses from the recent hack using more than $6.34 billion of company funds. The statement emphasizes that customer assets were never touched, that the exchange’s hot‑wallet was compromised, and that a proof‑of‑reserves report will be published within days.

How the breach unfolded

• Self‑destruct mechanism – The attacker triggered code that erased tooling and trace data, making forensic analysis difficult.
• EIP‑7702 delegation – This newer Ethereum feature lets a wallet run arbitrary smart‑contract code. The attacker used it to obtain on‑chain execution approval for the hot wallet, bypassing Binance’s normal approval workflow.
• Multiple entry points – Binance initially traced the intrusion to a compromised laptop, but later identified additional breach vectors, indicating a coordinated effort rather than a single rogue actor.

Binance’s financial response

• $5 billion in exact tokens – Binance already holds the stolen assets (USDC, USDT, BTC, ETH, BNB) in its treasury, allowing a direct swap for the lost user balances.
• Remaining $1.34 billion – The exchange will acquire the shortfall through market and OTC purchases, funded from its operating earnings that are largely retained in crypto.
• SAFU and company reserves – The payout will come from Binance’s SAFU emergency fund and broader corporate reserves, ensuring no user funds are drawn from cold‑storage wallets.

Operational steps and timeline

1. Withdrawal pause – Binance halted withdrawals to rebuild and retest its infrastructure, aiming to resume by Sunday.
2. Security review – A comprehensive audit is underway, covering endpoints, cloud services, key‑management, and signing processes.
3. Proof of reserves – A full report will be released on Monday, with an interim view provided earlier to reassure the market.
4. Ongoing fund movement – The attacker continues to shift assets, notably moving ~5.19 million TRX (≈$1.73 million) to multiple addresses on Tron.

Market and industry reaction

• Aave unfroze all markets after a brief precautionary freeze, confirming its contracts were unaffected.
• CZ’s perspective – Co‑founder Changpeng Zhao noted that while the dollar value is the largest ever seen, the Bitcoin‑equivalent loss is smaller than Mt. Gox’s historic collapse. He highlighted Binance’s ability to absorb the hit and its commitment to user protection.
• Analyst insights – Firms such as TRM Labs and Chainalysis attribute the attack to the North Korean group TraderTraitor, underscoring the geopolitical dimension of large‑scale crypto thefts.

Practical takeaways for users

• Your assets remain safe – Binance’s hot‑wallet exposure does not affect the cold‑stored balances that hold the majority of user funds.
• Monitor withdrawal status – Keep an eye on Binance communications for the exact time withdrawals will resume.
• Stay informed on proof‑of‑reserves – Review the upcoming report to verify the exchange’s solvency and the completeness of the reimbursement.
• Consider diversification – Even with strong safeguards, spreading holdings across multiple platforms can reduce exposure to single‑point failures.

--- Binance’s swift allocation of billions to cover the hack demonstrates the growing importance of robust emergency funds and on‑chain transparency for major crypto custodians.