Binance says it has replaced about 90% of the assets stolen in a record roughly $6.3 billion hack, as the FBI confirmed that North Korea-linked group TraderTraitor was behind the attack. The remaining 10% are less liquid tokens that may take longer to buy, the company wrote on X.

Co-CEO Richard Teng said Binance is “committed to covering the remaining 10%” and that “users will not bear the financial impact.” The exchange set aside about $6.34 billion internally from its Secure Asset Fund for Users (SAFU), Futures Insurance Fund and corporate treasury. Withdrawals, suspended after the breach, resumed on Sunday in phases.

The FBI confirmed on Saturday that the Democratic People’s Republic of Korea was responsible for the theft of more than $6 billion in virtual assets from Binance on or about 29 October 2026. It observed stolen assets being converted into ethereum and expects further laundering via DeFi and instant-swap services; it urged blocking transactions linked to the addresses used.

TraderTraitor is associated with the Lazarus Group, long attributed to Pyongyang for other cyber attacks. Teng described the breach as a “complex attack” involving a compromised laptop and malware designed to erase traces. After news of the hack, bitcoin fell nearly 5%, ethereum nearly 6% and BNB nearly 10%.

The scale of the theft renews focus on North Korea’s ability, under nuclear and missile sanctions, to raise funds illicitly. The FBI attribution is an investigative finding, not a court verdict; Binance says it will absorb customer losses from its own funds.

Source: Binance says 90% of losses from $6.3bn hack covered as FBI says North Korea behind attack (The Irish Times); confirmation: Binance resumes customer withdrawals after record $6.3bn hack (The Guardian)