Binance draws on treasury, SAFU and futures fund to cover 95% of $6.3bn hack
The exchange says its treasury, SAFU fund and futures insurance fund filled almost all of the hole, and withdrawals reopened on 1 November. The last 5% is still about $315m.
Why it matters: A hack of this size tests how deep an exchange's reserves run, and how Binance rebuilds SAFU matters to anyone keeping coins on an exchange.
Reviewed and fact-checked by Ishu Aggarwal on 2 Nov 2026
In short
- Binance says it has covered about 95% of the $6.3bn stolen in last week's record hack, according to Cointelegraph.
- The cover came from Binance's own treasury, its SAFU fund and its futures insurance fund; withdrawals reopened on 1 November.
- The remaining 5% is about $315m; the cover came from Binance's own funds, according to Cointelegraph.
- Binance doesn't publish accounts: Changpeng Zhao put revenue at about $5bn, Bloomberg at $10.7bn, Cointelegraph said.
Binance covers 95% and reopens withdrawals
Binance says it has covered about 95% of the $6.3bn stolen in last week's record hack, drawing on its own treasury, its Secure Asset Fund for Users (SAFU) and its futures insurance fund, according to Cointelegraph. Withdrawals reopened on 1 November, Cointelegraph reported on 2 November. Binance is the world's largest crypto exchange, a venue where people buy, sell and trade crypto, and where many keep their coins on deposit.
🚨 Binance says it has covered about 95% of the $6.3 billion stolen in last week's record hack, using its own treasury, its SAFU fund and its futures insurance fund. Withdrawals reopened on Nov. 1.
How does one exchange absorb a loss that size? Revenue.
Binance doesn't publish… pic.twitter.com/uJsUOQEgEp
The remaining 5% is still about $315m. A Binance spokesperson told Cointelegraph: "Binance will absorb the financial impact of the stolen funds, not users."
The FBI attributed the attack to TraderTraitor, a cyber unit sponsored by the North Korean state, The Times of India reported, adding that blockchain analysis firms TRM Labs and Chainalysis had also linked the hack to North Korea. US President Donald Trump said Washington was not yet certain whether North Korea was involved.
What the $6.3bn hole means for Binance revenue
What enables an exchange to absorb a loss of that size? Its revenue. Binance does not publish its accounts, so the scale of the hit depends on which estimate is used. Changpeng Zhao, Binance's founder, put annual revenue at about $5bn in March, while Bloomberg's estimate for the year to June is $10.7bn, according to Cointelegraph. On either figure, the loss is worth around six to 15 months of revenue. For comparison, Cointelegraph lists Tether's revenue for the past year at $5.96bn, Coinbase's at $5.65bn and Circle's at $2.38bn.
Being covered does not mean the money has been recovered. CertiK told Cointelegraph it needed more details to check Binance's claim of replacement funds. The six-to-15-month range also rests on two estimates rather than published accounts.
Are Binance users' funds safe?
For ordinary holders, the practical question is whether balances are intact. Binance says it will absorb the loss rather than users, a spokesperson told Cointelegraph. The open question the reporting points to is the refill: SAFU and the futures insurance fund were drawn on to cover the hole.
How traders reacted on X
Traders on X split between relief and unease. Satoshi Drops (@SatoshiDropsHQ) said on X that users are whole but the funds now need refilling, and that whether SAFU gets topped back up is the real stress signal. Uncle Meng (@menghung741209) said on X that covering 95% is not the flex here, because $6.3bn was stolen in the first place. Bad Decisions (@baddecisions530) said on X that the other 5% is still $315m, a lot of money to describe as almost done. Howling Husky (@Howling__Husky) said on X that the real question is how much liquidity walked out for good, citing $5.8bn in outflows.
95% covered from treasury, SAFU and the futures insurance fund means users are whole, but those funds now need refilling. Watch whether SAFU gets topped back up. That's the real stress signal.
Covering 95% is not the flex here. $6.3 billion was stolen in the first place — users should not have to be grateful that the hole got patched.
Covering ~95% of a $6.3B hole with treasury + SAFU + insurance is wild. Most exchanges would just be dead. Real question: how much of that liquidity walked out the door for good? $5.8B in outflows says a lot 🐺
Covering 95 percent of a 6.3 billion dollar hack with treasury cash and insurance funds is less a flex and more a reminder of how much revenue a monopoly exchange quietly stacks. The other 5 percent is still 315 million dollars, which is a lot of money to describe as almost done.
Others were more positive. Russell (@RusBus09) said on X that most exchanges would simply be gone after covering $6bn out of their own pocket. Jacky Goh (@JackyGohSG) said on X that covering a $6bn hit from treasury is impressive, but not needing to is the actual product. Rewards Bunny (@rewardsbunny) said on X that covering 95% of a $6.3bn hole is the most honest earnings report Binance never published.
Covering 95% of a $6.3B hole is the most honest earnings report Binance never published.
Covering a $6B hit from treasury is impressive. Not needing to is the actual product.
Covering $6B out of your own pocket... most exchanges would just be gone!
The next thing to watch is whether the SAFU and futures insurance buffers get rebuilt, and how much Binance discloses about its reserves. Binance said in its 31 October update that it is committed to replenishing SAFU to about $1bn. Binance has not published its accounts, according to Cointelegraph.
Key numbers
| What | Figure |
|---|---|
| Stolen in Binance hack | $6.3bn (October 2026) |
| Share Binance says it has covered | about 95% |
| Still to cover | about $315m |
| Hack equals about | six to 15 months of revenue (per Cointelegraph) |
| Binance revenue, CZ estimate | around $5bn (March 2026) |
| Binance revenue, Bloomberg estimate | $10.7bn (12 months to June 2026) |
Questions readers ask
Are Binance users' funds safe after the $6.3bn hack?
Binance says it will absorb the loss rather than users, a spokesperson told Cointelegraph. CertiK told Cointelegraph it needed more information to verify the replacement funds.
How is Binance paying for the $6.3bn hack?
Binance says it is using its own treasury, its Secure Asset Fund for Users (SAFU) and its futures insurance fund, according to Cointelegraph.
Does covering 95% mean the stolen crypto was recovered?
No. Covered means Binance has replaced the value of the stolen assets from its own funds, according to Cointelegraph. The stolen coins themselves are a separate matter.
When will Binance publish full proof of reserves?
Binance does not publish its accounts, according to Cointelegraph, so there is no full public reserves statement behind the 95% figure. Treat the number as Binance's own claim until it is independently verified.
Our view
At InvestIn.News, we think the real story is not that Binance is fine, but who can absorb a record hack at all. Covering users from treasury, SAFU and the futures insurance fund shows deep reserves, and it also shows how opaque those reserves are: Binance does not publish accounts, so the six-to-15-month revenue range rests on Changpeng Zhao's $5bn figure and Bloomberg's $10.7bn estimate.
Covered is not recovered. Binance has replaced value, but the stolen coins are a separate question, and CertiK told Cointelegraph it needed more information to verify the claimed replacement funds. The proof of reserves, still being generated, is the document that matters.
The buffers are the next test. SAFU and the futures insurance fund were drawn on, and whether they get rebuilt, and how quickly, is the clearest signal of how much strain the treasury is still carrying.
How we reported this: this story draws on Cointelegraph's 2 November post on X, Bloomberg's revenue estimate as cited by Cointelegraph, and 8 public posts shown in the story.
Follow the latest as it happens on NewsFeeds.
What to watch: Whether the SAFU and futures insurance buffers get rebuilt, and how much Binance discloses about its reserves.
Sources
- X: Cointelegraph (2 Nov 2026)
- Satoshi Drops (@SatoshiDropsHQ): Post
- Uncle Meng (@menghung741209): Post
- Rewards Bunny (@rewardsbunny): Post
- Howling Husky (@Howling__Husky): Post
- Bad Decisions (@baddecisions530): Post
- Jacky Goh | Rewards Bunny (@JackyGohSG): Post
- Russell | The Gaming Strategist (@RusBus09): Post
Disclosure: Keshav Aggarwal holds small amounts of crypto as long-term investments. He does not trade any asset he writes about within 24 hours of a story, and is not paid by any company covered on this site, updated 6 October 2026. Our holdings and trading policy.
How this was produced: the writer drafted this piece with AI help, from the reporting and sources it names, then checked and edited it. Read our Editorial and AI policy. Spotted a mistake? See Corrections.
Not investment advice. Read the risk disclaimer.