Attacker-Linked Wallets Hold 525,200 Ether as Binance Reports 90% Replenishment

Wallets attributed to the Oct. 29 Binance attack held about 525,200 Ether (ETH) at 12:51 p.m. ET Oct. 31 (16:51 UTC), leaving a potential source of market supply if the coins are sold. Attacker-held assets across the tracked wallets were valued at about $3.1 billion at that cutoff.

The total sums address-level balances in a cluster of wallets attributed to the attack. Those attributions may be incomplete or incorrect, so the count may not capture every wallet involved and may include addresses that were misidentified.

Earlier counts put more than 420,000 ETH in attacker-linked wallets at 8:30 p.m. ET Oct. 29 and 519,104 ETH across 42 wallets at 7:50 p.m. ET Oct. 30. The snapshots use different cutoffs and wallet scopes, so they do not establish a like-for-like increase.

About 200,600 ETH came directly from Binance wallets, while much of the remaining balance was acquired by swapping other stolen tokens. By the latest cutoff, the tracked funds had not gone to an exchange deposit address or mixer.

Binance said Oct. 31 that it had replenished about 90% of assets affected by the attack. It named Ether among 10 tokens backed at 100%; the remaining 10% involved less-liquid tokens outside that group. The statement concerns customer assets, separate from the ETH still held in attacker-linked wallets. TokenPost's earlier coverage of Binance's replenishment update has more on the reserve announcement.

Binance said it was using part of its Secure Asset Fund for Users (SAFU), a portion of its futures insurance fund and corporate treasury. “Binance will absorb the financial impact of these stolen funds, not our users,” Binance said. The update did not establish that the attacker-linked ETH had been recovered or that Binance planned to buy it.

Binance's reserve snapshot was taken at 8 p.m. ET Oct. 30 (00:00 UTC Oct. 31). It estimated that generating the full zero-knowledge proof would take 40 to 50 hours, with completion expected by Nov. 3 UTC. On Oct. 31, Binance said it remained on track to resume withdrawals Sunday, Nov. 1.