Binance Resumes Withdrawals: 95% of Assets Covered After $6.3 Billion Security Incident

Cryptocurrency exchange Binance has reopened withdrawals after experiencing a security incident involving $6.3 billion. The exchange stated that 95% of the stolen assets have now been covered. This development marks a new phase in handling the incident, but details surrounding the security breach and the remaining shortfall still need to be clarified.

Incident Recap: $6.3 Billion Security Breach and Withdrawal Suspension

Binance had previously suspended withdrawal services due to a security incident. According to public information, the incident involved an amount as high as $6.3 billion, making it one of the larger security incidents in the cryptocurrency exchange sector. The exchange subsequently initiated asset coverage efforts and resumed withdrawals after reaching a 95% coverage rate.

Withdrawal suspension is typically seen as a standard action for exchanges responding to risk, aimed at preventing further fund outflows and buying time to verify asset status. Binance's resumption of withdrawals indicates that it has gained a phased understanding of the current asset coverage progress. However, the original information did not disclose specific technical details of the incident, the attack vector, or attribution of responsibility.

Withdrawal Suspension and Reserve Mechanisms

In cryptocurrency exchange operations, withdrawal halt is a common risk control measure, usually occurring after security incidents, liquidity tightness, or anomalous on-chain activity is detected. The core purpose of suspending withdrawals is to freeze fund outflow channels, buy time for the team to verify hot wallet and cold wallet asset balances, trace abnormal transaction paths, and assess the scale of the shortfall. A related concept is "Proof of Reserves," where exchanges prove to users through on-chain signatures or third-party audits that their held assets are sufficient to cover user deposits. Leading exchanges like Binance have periodically published reserve reports, but such reports typically only reflect a snapshot at a certain point in time and are difficult to completely eliminate information asymmetry. In this incident, the time window of withdrawal suspension and resumption, and the calculation basis of the coverage rate (whether it includes insurance funds, own funds, or token buybacks) were not disclosed in detail, making it difficult for outsiders to independently verify the true meaning of the 95% coverage rate.

What 95% Asset Coverage Means

"95% of stolen assets have been covered" is the core message Binance is conveying externally. This ratio indicates that the exchange has弥补了绝大部分缺口 through its own funds, insurance, or other means. For users, the resumption of withdrawals means fund liquidity is reopened, but the coverage arrangement for the remaining 5% has not been made public.

From industry practice, exchanges typically cover losses after security incidents through reserves or external financing. Binance did not explain the specific composition of the 95% coverage, nor did it mention a timeline for the remaining portion. This information asymmetry may affect user confidence, especially in large-scale fund security incidents.

"Coverage" and Insurance Funds in Security Incidents

In the context of exchange security incidents, "asset coverage" typically refers to exchanges弥补被盗资产缺口 through own funds, emergency reserves, insurance payouts, or external financing. Binance has a "Secure Asset Fund for Users" (SAFU), which is accumulated through a portion of trading fees and is specifically used to protect user assets in extreme events. Other cases in the industry include Japanese exchange Coincheck, which used its own funds to compensate users after approximately $500 million in NEM was stolen in 2018; Mt.Gox went bankrupt because it could not cover losses. The level of coverage rate directly relates to whether users can fully recover their assets, but the calculation basis of the coverage rate—whether based on the coin price at the time of the incident or converted at current market price—can significantly affect the number. Binance has not disclosed the specific composition and valuation method of the 95% coverage, and whether the remaining 5% will be resolved through insurance, legal recovery, or installment compensation remains unknown.

Impact on Users and the Market

The resumption of withdrawals is directly beneficial to Binance users, especially those who were unable to transfer assets during the suspension. At the market level, security incidents at large exchanges often trigger discussions about centralized custody risks. Binance's rapid resumption of withdrawals and disclosure of coverage rate help stabilize sentiment, but the incident itself may still increase regulatory scrutiny.

In practical operations, users should pay attention to whether withdrawal fees and arrival times have returned to normal, and whether the exchange publishes more detailed security audit reports. Regarding the remaining 5% coverage shortfall, users have the right to demand more transparent explanations.

Lessons from the Security Incident

The $6.3 billion security incident once again reminds investors that even leading exchanges face security challenges. Centralized exchanges, while providing convenience, also concentrate risk. Decentralized finance (DeFi) solutions can reduce custody risk but also suffer from issues such as smart contract vulnerabilities.

For exchanges, transparency of information disclosure after an incident is as important as asset coverage progress. Binance's resumption of withdrawals is a positive signal, but a complete post-mortem review and security upgrade measures are key to rebuilding trust. Currently, public information is limited, and subsequent developments warrant continued attention.

One-line Summary

Binance resumes withdrawals after $6.3 billion security incident, claims 95% of stolen assets covered, remaining shortfall unresolved.

Paragraph Summary

Binance reopened withdrawals after a $6.3 billion security incident and announced that 95% of stolen assets have been covered. Withdrawal suspension is a standard risk response operation for exchanges, aimed at preventing fund outflows and verifying asset status. Resuming withdrawals indicates Binance has a phased understanding of asset coverage progress, but technical details of the incident, the attack vector, and coverage arrangements for the remaining 5% shortfall have not been disclosed. For users, resuming withdrawals means liquidity is reopened, but information asymmetry may affect confidence. The article also discusses custody risks of centralized exchanges, reserve and insurance fund mechanisms, and implications for regulatory attention and industry trust rebuilding.