Rubbish Check
CNBC Top News · 31 October 2026 source
“Binance says 90% of $6.3 billion hack losses are now covered, plans to resume withdrawals Sunday”
R3/ 10
Lightly altered
Rubbish Rating — 1 = base fact, 10 = pure rubbish
12345678910
In short
Rubbish Talk rates CNBC's claim that Binance has "covered" 90% of its $6.3 billion hack losses a 3/10 because the figure is accurately attributed to Binance's own statement, but "covered" means replenished with company funds, not recovered from the attacker, a distinction the headline doesn't spell out.
The Verdict
Lightly altered. The headline faithfully reports what Binance itself claimed, down to the exact dollar figure and the Sunday withdrawal target, and the article body properly caveats the uncertainty around the attack's cause and perpetrator. The one soft spot is the word "covered," which a casual reader could mistake for "recovered from the hacker" when it actually means Binance bought back tokens with its own treasury and insurance funds.
What actually happened
Binance said Saturday that it has covered up to 90% of the roughly $6.3 billion in token assets stolen from its hot wallets in a record crypto theft announced Thursday. Binance said it will continue to buy the remaining relevant token assets through market and over-the-counter channels until the covered amount reaches 100% for all tokens. Other outlets reported the same core claim with similar framing, with Reuters noting Binance "replaced" rather than recovered the stolen funds.
Key facts
- Binance covered up to 90% of the roughly $6.3 billion in token assets stolen from its hot wallets, in a theft announced Thursday.
- The 10 major tokens, BTC, ETH, USDT, BNB, SOL, USDC, XRP, USD1, RLUSD, and ZEC, are fully backed 100%, per Binance's own statement.
- The remaining outstanding 10% is tokens "outside its top 10 that are less liquid, which means they may take longer to source in the required amounts," according to the article.
- Funding source: Binance is tapping its Secure Asset Fund for Users (SAFU), a portion of its Futures insurance fund, and its corporate treasury to replenish the assets.
- Reuters corroborates: Binance has set aside around $6.34 billion of company funds internally to cover the losses, confirming this is replenishment, not recovery of stolen crypto.
- Resuming withdrawals is the "next milestone," resuming withdrawal services for users by Sunday, subject to security checks, while the exchange continues its investigation into the attack.
- Cause and culprit remain unconfirmed: Binance's initial "compromised DevOps engineer's laptop" explanation was later revised by Co-CEO Richard Teng to describe a more complex attack, and TRM Labs flagged North Korea-linked patterns without a formal attribution.
What to watch for
- Whether Binance actually hits 100% coverage and whether Sunday's withdrawal reopening holds, or slips as "security checks" uncover more.
- Whether a formal attribution to North Korea (or anyone else) materializes, and whether Binance's shifting explanation of the attack vector draws regulatory scrutiny.
- Watch for later coverage conflating "covered" with "recovered"; the distinction between company-funded replenishment and actual recovery of stolen assets is the detail most likely to get flattened in follow-up headlines.
About this scoreThe R-Score is Rubbish Talk's editorial opinion on how far a headline's framing sits from what the underlying facts support. It is a judgement about presentation and emphasis, not an allegation that any outlet has acted dishonestly. Every figure we rely on is linked under Receipts so you can check it yourself.