What actually happened?
Binance, the world's largest cryptocurrency exchange, announced on Thursday that it had finished covering the assets affected by the October 29 attack. According to information picked up by both Kryptonovinky.cz and the Slovak Kryptonovinky.sk, this is an incident whose value Bitcoin Magazine put at $6.34 billion and labeled the largest crypto theft in history.
An important distinction, one the sources themselves stress: "covering the loss" does not mean the money came back from the attackers. According to Kryptonovinky.cz and Kryptonovinky.sk, Binance replaced the stolen tokens from its own funds and bought part of them directly on the market. In other words, the exchange patched the hole, not the hackers.
What does "Funds are SAFU" mean?
Along with the announcement, Binance published, according to Poland's BitHub.pl, a new proof of reserves, this time covering 198 tokens. The exchange's founder Changpeng Zhao (CZ) presented the whole thing as a success under the well-known slogan "Funds are SAFU."
Proof of reserves is a method exchanges use to show they hold enough assets to cover their clients' balances. By itself, though, it says nothing about the exchange's liabilities, so it offers a partial, not a complete, picture of the platform's health.
According to BitHub.pl, Binance claims clients did not lose a single cent. For now that is a statement by the exchange, not an independently verified fact.
How do the $1.2 billion and the US fit into this?
Here we need to be precise, because several different figures get mixed up in the headlines. According to CoinDesk, US federal authorities took action against infrastructure used in a scheme called FaceStealer, through which up to $400 million in crypto assets was allegedly stolen. At the same time, according to the same source, the Department of Justice (DOJ) is targeting $1.2 billion in stolen crypto and ties the whole case to North Korea.
Let's sum up the three different amounts flying around this story:
| Amount | What it means according to sources | Source |
|---|---|---|
| $6.34bn | Value of assets affected by the October 29 attack | Bitcoin Magazine (via Kryptonovinky.cz / .sk) |
| $1.2bn | Volume of stolen crypto the DOJ is targeting | CoinDesk |
| up to $400m | Damage attributed to the FaceStealer scheme | CoinDesk |
From the available sources, it is not possible to reliably confirm exactly how these figures relate to each other, that is, whether this is the same attack sliced into different definitions or separate, albeit related, cases. For now that remains an open question.
Why watch this from a Czech and Slovak perspective too?
This story reached local readers mainly through Czech and Slovak crypto media (Kryptonovinky.cz and Kryptonovinky.sk), which usually pick up foreign reporting. For users in the region who actually use Binance, one thing is key: the exchange declares that client balances are covered, but the publicly available details about the course of the attack and the connection to the US investigation are still sparse.
What is generally worth watching in cases like these:
- Whether the exchange will publish an independent audit, not just its own proof of reserves.
- Whether the link between the attack and the DOJ's action and North Korea will be confirmed or refuted.
- Whether the differing figures ($6.34bn, $1.2bn, $400m) will line up into a single verifiable picture.
What do we know so far and what not?
It is demonstrable that Binance announced it covered the losses from its own funds and that, according to CoinDesk, US authorities are pursuing action against stolen crypto assets. What remains unproven is the connection between the specific amounts, the full accounting of the impact on individual clients, and how much of the funds will actually be seized or returned. charliedesk is not closing this story, but will return to it once verifiable data accumulates.

