Binance said in an Oct. 30 update that it had covered about 80% of the assets stolen in a roughly $6.3 billion hack and was buying back the rest. It planned an initial proof-of-reserves snapshot within 12 hours, with results due Nov. 2. Critics said a snapshot taken after the buyback could not show how large the earlier shortfall was.
Social media users alleged the hack was an inside job, but the excerpt says those claims lack hard evidence. Blockchain intelligence firm TRM Labs attributed the theft to North Korea’s Tradertraitor group with high confidence and said an attacker likely gained control of Binance’s cross-chain hot-wallet signing system. Elliptic also considered North Korea-linked actors likely responsible, but said no government or law enforcement agency had confirmed the attribution. Binance said it found additional breach points and no evidence that wallet private keys leaked; its co-CEO said customer funds were unaffected.