What the Binance Hack Means for Customers, Crypto Prices and the Hunt for the Funds

Binance says customers will be fully reimbursed after hackers stole $6.3 billion in digital assets from the world's largest crypto exchange, a theft the FBI attributed to North Korea on Saturday. The company said it had set aside enough of the stolen currency to cover 90% of the missing assets, according to the Associated Press.

Most of the theft took place in about 20 minutes, starting Thursday evening, Oct. 29, according to IDNFinancials, which cited Reuters. Crypto experts call it the largest hack in history.

What it means for Binance customers

Binance and its co-CEO, Richard Teng, have said customer money is safe and that the company will cover all losses. The exchange temporarily suspended withdrawals. On Friday, Oct. 30, it said withdrawal services were expected to resume within 48 hours.

The company said it had set aside about $6.34 billion of its own funds to cover losses but did not say where that money came from. Binance's website describes a $1 billion bitcoin reserve fund meant to protect customer assets after a security breach. Founder Changpeng Zhao said on X that the company also held more than $1 billion worth of SpaceX shares.

The scale of the platform explains the concern. According to its 2025 annual report, Binance had 335 million registered users worldwide and managed about $162.8 billion in customer assets.

What the FBI says happened

In a statement Saturday, the FBI said the attack was tied to “malicious cyber activity” by a group known as TraderTraitor. The bureau said the same actors were behind a $1.5 billion hack of the Bybit exchange last year.

Blockchain analytics firms TRM Labs and Chainalysis said earlier that they had a high degree of confidence North Korea was responsible, and UK-based Elliptic reached the same view, according to IDNFinancials. North Korea has consistently denied such allegations, and its representatives had not responded to Reuters' requests for comment.

Binance's preliminary investigation pointed to a technician's compromised laptop as the likely entry point, which allowed unauthorized withdrawals. The company later said it had found several other security breaches. Teng said the investigation had not yet identified specific individuals.

How crypto markets reacted

The news weighed on prices, according to IDNFinancials. Bitcoin briefly fell to a six-week low of $76,368, and ether dropped more than 3% to a two-month low of $2,178. Both later began to stabilize. BNB, the token used to pay transaction fees on Binance, fell 5.3% over 24 hours to $699.54, according to CoinGecko data.

Tim Sun, a senior researcher at HashKey Group, said the incident could further dampen investor appetite for risk assets and push people to reassess the security of holdings on centralized exchanges. The sector was already under pressure from rising U.S. interest rates and weaker demand for exchange-traded funds, according to the report.

Where the stolen money stands

About $3 billion has been traced so far. Tether said it froze nearly $1.57 billion in assets linked to the incident, and Circle froze more than $800 million. Reports said stablecoin issuers, including World Liberty Financial, froze roughly half of the stolen assets. Binance has not explained the status of the remaining $3.3 billion.

The FBI said TraderTraitor was converting the stolen assets mainly into ethereum and is expected to try to move them through decentralized finance, or DeFi, platforms and “instant swap services.” The bureau asked crypto exchanges, analytics firms and others to block transactions tied to certain addresses so the money cannot be laundered.

What happens next

Ari Redbord, chief policy officer at TRM Labs, told the AP he expects the hackers to split the assets into pieces and launder them through smaller exchanges, a process that could take months. He described the theft as “bank robbery, in this case, at the speed of the Internet,” but said investigators can also trace funds in real time to disrupt laundering and seize money back.

Binance said it is working with law enforcement in several countries, including the FBI and the U.S. Secret Service, according to a person familiar with the matter cited by Reuters. Abu Dhabi's Financial Services Regulatory Authority, which issued Binance's primary operating license, said it is in close contact with the company and monitoring developments.

Around Prague, based on reporting by IDNFinancials, ABC News