Binance Says Company Funds Covered $6.34 Billion October Hack

The exchange's reliance on internal reserves rather than a regulated insurance backstop leaves the verifiability of its user-protection claims dependent on a proof-of-reserves snapshot that third...

Binance, the world's largest cryptocurrency exchange by reported trading volume, announced on November 12, 2026 that it had fully covered a $6.34 billion hack that occurred on October 29, using internal company funds, according to Bitcoin Magazine. The exchange stated that all affected users have been made whole.

Binance said the repayment drew from three internal sources: its Secure Asset Fund for Users (SAFU), its futures insurance fund, and its corporate treasury, according to the same Bitcoin Magazine report. The exchange did not disclose the precise allocation among the three funds in its public statement.

The $6.34 billion figure represents the total value of digital assets taken in the October 29 theft, as reported by Bitcoin Magazine. At that scale, the incident would rank among the largest single security breaches in cryptocurrency exchange history, surpassing the approximately $625 million Ronin Network hack of March 2022 and the roughly $600 million Poly Network incident of August 2021, based on contemporaneous public reporting of those events.

Binance published a 198-token proof-of-reserves snapshot following the announcement. However, Bitcoin Magazine noted that users cannot yet independently verify the snapshot. Independent verification would typically require a Merkle-tree audit conducted by a third-party accounting or cryptographic auditing firm, a process Binance has not confirmed is underway as of the publication date of this article.

SAFU was established by Binance in July 2018 and is funded by allocating ten percent of trading fees to the reserve, according to Binance's own published documentation. The fund has been cited by the exchange in prior incidents as a user protection mechanism. Its publicly stated value has varied over time; Binance reported a $1 billion SAFU balance in January 2022, according to a company blog post from that date. Whether the fund held sufficient assets before the October 29 event to contribute meaningfully to a $6.34 billion repayment is not disclosed in the current public record.

The futures insurance fund is a separate pool maintained to cover losses in Binance's derivatives markets when traders' accounts fall below margin requirements, preventing the socialization of losses to profitable counterparties. Its pre-incident balance has not been disclosed in the available source material.

Binance is incorporated in the Cayman Islands and operates without a single primary regulatory jurisdiction, though it holds licenses in several countries including France, Bahrain, and Abu Dhabi, according to the exchange's public regulatory disclosures. It is not registered as an exchange with the U.S. Securities and Exchange Commission. U.S. Residents are served by a separate entity, Binance.US, which operates under its own regulatory framework. The parent exchange's hack and repayment announcement is relevant to U.S. Investors who hold assets on the international platform or whose counterparties do.

Binance entered a $4.3 billion settlement with the U.S. Department of Justice in November 2023, in which founder Changpeng Zhao pleaded guilty to violations of the Bank Secrecy Act, according to a DOJ press release dated November 21, 2023. Zhao was subsequently sentenced to four months in prison. That settlement required Binance to submit to ongoing compliance monitoring, which remains active under the terms disclosed by the DOJ.

The exchange has not named the individuals or groups responsible for the October 29 hack, nor has it specified which blockchains or token contracts were exploited. What would clarify those questions is an on-chain forensic report from Binance or a third-party blockchain analytics firm such as Chainalysis or Elliptic, neither of which had published findings on this incident as of November 12, 2026.

For U.S.-based cryptocurrency investors, the incident highlights an ongoing structural question about centralized exchange risk: whether company-held reserves are sufficient and independently verifiable substitutes for regulated deposit insurance. The Federal Deposit Insurance Corporation insures U.S. Bank deposits up to $250,000 per depositor per institution; no equivalent federal program applies to cryptocurrency exchange balances. The Commodity Futures Trading Commission and the SEC have each proposed but not finalized rules that would address reserve and custody requirements for digital asset platforms serving U.S. Customers.