$6.3B Hack Recovery at 95%: Binance Now Warns a Second Wave Is Coming
Binance has recovered nearly 95% of funds from a $6.3 billion hack — and is already sounding the alarm that a second wave of crypto theft is on the way.
The November 2 update confirms the full proof of reserves is complete, replenishment sits at roughly 95%, and broader token coverage is being rolled out. On paper, that sounds like a win. But Binance isn't celebrating. Instead, the exchange is pushing an active warning to users that bad actors are regrouping, and the next attack vector may already be in motion.
Why This Matters More Than the Recovery Numbers
The 95% replenishment figure is significant, but traders are missing the real signal here. When the world's largest crypto exchange publicly warns of a second theft wave mid-recovery, that is not routine communications. That is an exchange that has visibility into threat patterns most retail holders will never see.
Historically, the period immediately following a major exploit is one of the highest-risk windows in crypto. Hackers who studied the first breach know the security response playbook. They probe the edges while attention is focused on the headline recovery numbers. Binance flagging this publicly suggests the threat intelligence is serious enough that silence is no longer an option.
What the Proof of Reserves Update Actually Tells Us
The completion of the full proof of reserves is a structural positive. It means Binance can demonstrate it holds the assets it claims, a transparency benchmark the industry has demanded since the FTX collapse in 2022. Expanded token coverage signals the exchange is broadening that accountability across more of its listed assets, not just the flagship coins.
But proof of reserves is a snapshot. It tells you what an exchange holds at a moment in time. It does not protect against what comes next. Binance knows this, which is likely why the recovery update and the second-wave warning were packaged together rather than released separately.
What Crypto Holders Should Watch Right Now
If you hold significant funds on any centralized exchange, this is a moment to review your exposure. Consider moving assets you do not need for active trading into self-custody wallets. Hardware wallets are not perfect, but they remove the exchange counterparty risk entirely.
Watch for any unusual withdrawal delays or communication from Binance over the next two to four weeks. A second wave warning from an exchange at this scale is not noise. It is a signal worth taking seriously before the next headline forces everyone to pay attention.
The recovery is nearly done. The harder problem may be just getting started.