Binance has replaced the full $6.34 billion drained from its platform in the largest cryptocurrency theft on record, closing the gap with its own money rather than recovering it from the attackers.
Thursday's announcement is the first time the exchange has declared the make-whole process finished, two weeks after hot wallets were emptied on Oct. 29 in a breach that began with a fake job interview and a poisoned developer tool.
The funding came entirely from Binance's own accounts. More than $6.34 billion in company capital bought back the affected tokens through market and over-the-counter channels, drawing on a partial deployment of the Secure Asset Fund for Users, a slice of its futures insurance fund above the level required by its risk framework, and its corporate treasury.
Binance has committed to refilling SAFU to about $1 billion after that partial draw, keeping its emergency user-protection reserve fully stocked.
A very small number of tokens Binance no longer lists were also caught up in the incident. Those holdings fall under the exchange's delisting process, and users who own them are covered.
What Thursday's update leaves unanswered is how much of the stolen crypto has actually been clawed back, and no attacker has been named.
Customers also cannot confirm the new backing themselves yet. A zero-knowledge proof covering 198 tokens, up sharply from the 10 in the Oct. 31 snapshot, needs roughly 40 to 50 hours of computation to generate before holders can independently verify 1:1 reserves. Until then, that backing rests on Binance's word, and withdrawals are still returning on the phased schedule that began Nov. 1 with bitcoin.