Binance Says 98% of Stolen Assets Replenished as Proof of Reserves Expands to 44 Tokens

Published November 5, 2026, 6:45 AM PKT. Based on Binance Recovery Update #7, published November 4, 2026 (primary source), PANews' November 4, 2026 report (secondary source), and Blockchain Reporter's November 4, 2026 report (secondary source).

Binance says it has replenished about 98% of the assets affected by the October 29 security incident that drained roughly $6.3 billion from its hot wallets, and has expanded its proof of reserves to cover 44 tokens, up from 10, according to Recovery Update #7 published on November 4, 2026. The exchange says it has set aside more than 100% of the funds needed from its own resources and will bear the full losses itself, so users will not bear them, and it is continuing to buy the remaining token assets through market and over the counter channels. The update is the closest Binance has come to closing the book on the largest theft in crypto history, and it is also the first time the exchange has extended its verifiable reserve proof beyond the ten major assets covered by the October 31 snapshot. This site previously reported the 95% milestone when withdrawals resumed in phases from November 1, so the new figure is a follow up to that coverage, not a new incident.

98% replenished, up from 95%

The headline figure is up from 95% in Binance's November 2 update, and from 90% on October 31, according to the sequence of its own updates. Applied to the exchange's estimated total impact of around $6.3 billion, 98% works out to about $6.17 billion restored, leaving roughly $126 million, or 2%, still to be sourced, Blockchain Reporter calculated. Binance says purchases for that last 2% will take longer because those tokens are less liquid, and it has given no completion date for them. The funding comes from the exchange's own resources, spanning its corporate funds and its Secure Asset Fund for Users, the emergency reserve known as SAFU, rather than from customer balances, according to the update. That distinction matters: replenishment means Binance is replacing stolen tokens with its own money, not recovering the original coins from the attackers. The U.S. Federal Bureau of Investigation has attributed the theft to North Korea's TraderTraitor group, and large amounts of the stolen funds remain frozen or unrecovered, which is a separate track from the replenishment count.

From 10 tokens to 44

The transparency side of the update is a second milestone. Binance took a new proof of reserves snapshot at 00:00 UTC on November 4, and it covers 44 tokens, more than four times the 10 in the previous snapshot, according to the update. The earlier snapshot, taken October 31, covered Bitcoin ($BTC), Ethereum ($ETH), Tether ($USDT), BNB ($BNB), Solana ($SOL), USD Coin ($USDC), XRP ($XRP), World Liberty Financial USD ($USD1), Ripple USD ($RLUSD), and Zcash ($ZEC). Binance says the new snapshot is available on its proof of reserves website, and that generating the full zero knowledge proof for it is expected to take about 50 to 60 hours because of the computing workload. Only once that proof lands will users holding any of the 44 tokens be able to check for themselves that their balances are backed at least 1:1, so self verification for the wider token set is still pending, with the window pointing to around November 6. PANews confirmed the same sequence: the snapshot is done, the proof is not yet ready, and Binance says it will keep pushing toward the full restoration of withdrawal services.

What the proof does and does not settle

A proof of reserves is a point in time inventory, not a full financial audit, and readers should not overread it. It shows that, at the snapshot moment, the exchange held at least one coin for each coin owed on the covered tokens. It does not prove that every future day stays one to one, and it does not itemise each drawdown from SAFU or the futures insurance funds. There is also an unresolved inconsistency in Binance's own timeline that the exchange has not reconciled. Techish noted that Binance put replenishment at 90% on October 31 and still gave 95% in its November 2 notice, yet its incident report published November 3 said 98% had been replenished as of October 31. Those figures cannot all describe the same measure on the same date, and Binance has not explained what each percentage measures. The discrepancy alone is not evidence that customer balances are missing, but it means the recovery timeline should be read as the company's own accounting, not as an independently reviewed result. What is established is the direction and the scale: withdrawals have been reopening in phases since November 1, the reserve proof now covers 44 tokens instead of 10, and the remaining gap is the hardest, least liquid slice. The next check is the zero knowledge proof itself, expected in about 50 to 60 hours from the November 4 snapshot, when users can verify the wider coverage for themselves.

Sources

• Binance, Binance Expands Proof of Reserves to 44 Tokens as 98% of Impacted Assets Are Replenished, Recovery Update #7, November 4, 2026 (primary source: 98% replenished, up from 95%, more than 100% set aside from own resources, new snapshot at 00:00 UTC on November 4 covering 44 tokens up from 10, zero knowledge proof expected in 50 to 60 hours, remaining 2% less liquid, withdrawals reopening in phases)
• PANews, Binance: 98% of Stolen Assets Backfilled, Proof of Reserves Snapshot Expanded to 44 Tokens, November 4, 2026, updated November 5, 2026 (secondary source: 98% backfilled, remaining 2% low liquidity tokens bought through market and OTC channels, full losses borne by Binance, snapshot expanded from 10 to 44 tokens, self verification at 1:1 once the zero knowledge proof is ready)
• Blockchain Reporter, Binance Replenishes 98% Of Stolen $6.3B, November 4, 2026 (secondary source: estimated total impact around $6.3 billion, 98% equal to about $6.17 billion with roughly $126 million remaining, funding from SAFU and company funds, snapshot at 00:00 UTC on November 4 covering 44 tokens, proof of reserves as a point in time inventory)
• Techish, Binance hack: what its reserves proof means for your money, November 4, 2026 (secondary source: 90% on October 31, 95% in the November 2 notice, incident report saying 98% as of October 31, figures not reconciled, proof of reserves covers a dated snapshot and is not a full financial statement audit)

This article is news reporting and is not investment advice.