Binance's $5B claim has a hole in it
Binance says $5B in matching tokens covers hack losses, but CertiK can't verify it and flags a $2.1B gap.
Binance said Friday it holds $5 billion in the exact tokens stolen in its $6.3 billion hack, on top of a $1.17 billion emergency fund, and will show both in its next proof-of-reserves report. It would not say when it acquired the $5 billion, where it's stored, or share wallet addresses.
What Binance disclosed and what it didn't
The exchange confirmed Thursday's hack across 10 blockchains as the largest crypto theft on record, with North Korean group TraderTraitor named as the attacker. It also said roughly $3 billion of the stolen funds has been frozen with help from blockchain partners, though those frozen assets don't count toward the $5 billion replacement claim.
- Binance says $6.34 billion in company funds is set aside, with $5 billion already held in matching tokens.
- CertiK CEO Ronghui Gu estimates frozen assets plus the $1.17 billion emergency fund cover about 66% of losses, leaving a $2.1 billion gap.
- That gap equals roughly 1.3% of Binance's reported $165 billion in exchange reserves, per Gu's math.
- Nansen told Cointelegraph it cannot verify any Binance funds beyond the $1.16 billion emergency reserve, or where the rest would come from.
- CertiK says it needs more data from Binance before it can confirm the $5 billion on-chain.
Why the number is unverified, not false
The default read treats Binance's $5 billion figure as reassurance: the exchange says it's covered, case closed. That framing skips the fact that two separate blockchain-forensics firms, CertiK and Nansen, say they cannot independently confirm where that money sits.
Binance won't name wallet addresses, citing security. That's a defensible operational call after a $6.3 billion theft, but it also means the only source for the $5 billion claim right now is Binance itself.
Co-founder Yi He said annual revenue alone could cover the shortfall. CZ pointed to SpaceX holdings worth more than $1 billion and a trading-fee model that accumulates the tokens it lists.
None of that is a wallet address. Gu's math puts the real question at $2.1 billion unaccounted for, a figure Binance has not directly addressed.
Binance also discloses weekly company-fund reports to Abu Dhabi's FSRA, a requirement it says predates the hack. That's a real compliance channel, but it's a regulator-facing report, not a public, on-chain proof that outside auditors can check against the stolen-token list.
The proof-of-reserves report Binance promises next is the actual test. Until it posts, the $5 billion is a claim with a named source and no visible wallet.
What confirms or kills this
- Binance's next proof-of-reserves report explicitly lists the $5 billion in matching tokens with verifiable wallet balances.
- CertiK or Nansen publish independent on-chain confirmation of Binance's holdings, closing or widening Gu's $2.1 billion gap estimate.
- Binance discloses when the $5 billion was acquired and confirms how much of the $3 billion frozen total gets recovered versus permanently lost.