Binance has replaced 90% of the crypto stolen in a $6.3 billion (USD) breach, the exchange said in a statement reported 31 October 2026. This matters because it shows how a major exchange can absorb a historic hack without freezing or cutting user balances.
What actually happened
According to CoinDesk, Binance said it has replaced 90% of the crypto stolen in a $6.3 billion (USD) breach. The exchange said it is absorbing all losses through corporate funds, futures reserves, and SAFU. Binance said user balances remain intact throughout the process. The report, published 31 October 2026, did not specify when the original breach occurred or how it was detected. Binance has not disclosed the identity of the attackers or the method used to access funds. The company has not said when it expects to replace the remaining 10% of stolen crypto.
How we got here
Crypto exchanges have faced large breaches before, and some keep reserve funds specifically to cover user losses. Binance used three separate funding sources here: corporate funds, futures reserves, and SAFU, according to CoinDesk. The report does not say when the breach occurred, how it was discovered, or what vulnerability allowed the attack. It also does not confirm whether this ranks as the largest breach in Binance's history. Those gaps leave open how the breach itself happened, even as the financial response is reported as nearly complete.
Why this matters for you
For users, the reported outcome means balances stayed whole despite one of the largest disclosed exchange breaches. For builders and competing exchanges, this sets a reference point for how quickly a hack of this size can be addressed using corporate reserves rather than user funds. For the wider market, trust now depends on what Binance discloses next about the attack itself. Anyone holding funds on centralized exchanges may want to watch whether Binance names the attack vector, and whether other platforms review the size of their own reserve funds in response.
The bigger question
If a $6.3 billion (USD) breach can be fully absorbed without touching user funds, does that reduce pressure to fix the underlying security gap? Or does covering losses this completely risk normalizing breaches of this scale, as long as a reserve fund can pay for them? How exchanges answer that may shape future security spending.
What to watch
Binance has not announced a timeline for replacing the remaining 10% of stolen crypto. No date has been given for a full incident report or for disclosure of the attack method. Readers should watch for follow-up statements from Binance and for any regulatory response to a breach of this size.
