Binance announced on Friday that it has allocated over $6.34 billion in company funds to cover losses from a recent security breach, with $5 billion of this reserve already held in the specific tokens that were stolen. A spokesperson confirmed that these assets are under Binance custody and will be reflected in the exchange’s upcoming proof-of-reserves report, which details holdings backing customer balances. The company declined to disclose wallet addresses or acquisition timelines for security reasons.
The disclosure follows confirmation of a $6.3 billion hack, described as the largest cryptocurrency theft on record. Blockchain intelligence firm TRM Labs attributed the attack to North Korean hacking group TraderTraitor, noting that funds were drained from wallets across 10 blockchains on Thursday. Binance stated that approximately $3 billion in affected assets had been frozen through cooperation with blockchain partners; these frozen amounts were excluded from the company funds set aside for loss coverage.
Regulatory oversight remains active, with Binance providing weekly reports on its company funds to the Financial Services Regulatory Authority (FSRA) of Abu Dhabi Global Market in the United Arab Emirates. The exchange noted that this reporting requirement existed prior to the incident. As of the announcement, Binance had not confirmed which additional tokens still need to be purchased, when those acquisitions will occur, or the total amount of stolen crypto recovered.
This development highlights the tension between immediate liquidity assurance and long-term operational transparency following a catastrophic security event. By holding $5 billion in matching tokens, Binance aims to stabilize user confidence and demonstrate solvency without waiting for market recovery or further asset liquidation. However, the refusal to disclose wallet addresses or acquisition dates limits independent verification, forcing reliance on internal attestations and future proof-of-reserves reports. This opacity may sustain skepticism among institutional participants who require granular audit trails to assess counterparty risk accurately.
From a regulatory perspective, the ongoing engagement with the FSRA suggests an attempt to align crisis management with established compliance frameworks. Yet, the scale of the loss—$6.3 billion—tests the boundaries of current insurance and reserve requirements for centralized exchanges. The attribution to state-sponsored actors adds geopolitical complexity, potentially influencing how regulators view systemic risks associated with cross-border digital asset flows. Future scrutiny will likely focus on whether the remaining unfrozen losses can be absorbed without impacting broader market stability or triggering stricter capital adequacy rules.
