In its third security update, Binance clarified that the remaining 10% consists of less liquid tokens, which may take longer to procure the required amounts, and that it continues to purchase them via the market and direct deals outside trading platforms.
The platform noted that coverage sources include its vault and a portion of its futures insurance fund, in addition to an anticipated partial use of the SAFU user protection fund within the next 24 hours. It pledged to restore the latter to about one billion dollars.
It also announced the release of updated reserve data dating back to midnight Saturday GMT, with an expectation of full cryptographic verification available by next Tuesday, enabling holders of the ten tokens to confirm their balances are covered at least on a one‑to‑one basis.
Binance’s internet‑connected wallets were breached on the evening of Thursday, October 29 (first of Tishrin), according to its prior statement, prompting it to temporarily suspend withdrawals for security reviews, while deposits and other services remained unaffected.
The company said that preliminary investigations indicated a possible breach of a laptop belonging to one of its technical operations engineers, which allowed the attacker to access one of its systems and submit unauthorized withdrawal requests. It later added that it had discovered additional breach points, without finding evidence of private‑key leakage for the wallets.
Binance also announced freezing about $3 billion of assets linked to the incident, in cooperation with law‑enforcement agencies, blockchain data‑analytics firms, coin issuers, and industry partners, while continuing efforts to recover them. These efforts differ from providing alternative assets to cover the shortfall caused by the theft.