Binance: Approximately 80% of stolen funds have been replenished, withdrawals expected to resume in phases within 34 hours, first proof-of-reserves snapshot planned within 12 hours.

October 31: Binance released Security Incident Progress Announcement #2 at 3:33 AM this morning, disclosing investigation and asset compensation progress over the past 24 hours. The announcement stated that at 04:05 on October 30, 2026 (UTC+8), Binance's hot wallet was attacked, resulting in the loss of approximately $6.3 billion in token assets. Binance explicitly stated that it will fully cover the losses through the SAFU fund and the company's own funds, and will not pass the losses on to users.

Currently, Binance has prepared more than $6.34 billion in company funds, of which more than $5 billion equivalent in USDC, USDT, BTC, ETH, BNB and other assets have been secured, approximately 80% of the stolen funds have been replenished, and the remaining portion is being purchased through market and over-the-counter trading channels. Previously, Binance had frozen approximately $3 billion in assets on-chain.

Regarding the cause of the attack, Binance stated that the initial investigation believed the incident may have involved a compromised laptop, but subsequent investigation found other points of intrusion. No evidence of wallet private key leakage has been found so far, and further technical investigation results are expected to be published in approximately 48 hours.

Regarding follow-up arrangements, Binance is striving to restore withdrawal services in phases within approximately 34 hours, depending on the progress of security checks; it plans to take its first proof-of-reserves snapshot within 12 hours and publish the results before November 2. In addition, Binance will continue to cooperate with law enforcement agencies, blockchain intelligence companies and asset issuers to track and recover stolen funds, and will publish a complete technical retrospective report.