Binance said Saturday it had covered 90 percent of about $6.3 billion in crypto taken in a theft disclosed Thursday and that it remained on track to reopen withdrawals Sunday, BBC and Al Jazeera reported^1,2. The exchange said the remaining 10 percent involves less liquid tokens that may take longer to buy^1,2.

In a statement quoted by those outlets, Binance said it would absorb the financial impact rather than pass it to users^1,2. Al Jazeera said the replacements came from a Secure Asset Fund for Users, a futures insurance fund and the corporate treasury². The Verge reported the company had reserved more than $6.34 billion, with $5 billion already held in the affected tokens⁴.

Binance has said an engineer's laptop was compromised and later that investigators found additional points of breach^1,3,4. Co-chief executive Richard Teng said more than one person took part and that the attack was not a single one-click action, according to BBC and The Verge^1,4. The company said it found no evidence that wallet private keys leaked^3,4,5.

The FBI said Saturday that North Korean actors linked to a group called TraderTraitor were converting stolen assets mainly into Ethereum and asked virtual-asset firms to block listed addresses, Al Jazeera reported². TechCrunch and The Verge said TRM Labs, Elliptic and Chainalysis had already attributed the theft to that group^3,4. North Korea has denied involvement in such attacks, BBC noted¹.

About $3 billion in stolen assets were frozen with partners, Binance said Friday^1,4. Ars Technica, citing Elliptic, said attackers had moved other sums into assets that could not be frozen⁵. Tether and Circle froze large amounts of USDT and USDC, that account said⁵.

The U.S. Secret Service said it was working with private partners to identify, freeze, trace and recover funds, BBC reported¹. Abu Dhabi's Financial Services Regulatory Authority, which regulates Binance's main global exchange, said it was engaging with the company⁵. Whether withdrawals resume as scheduled Sunday was not confirmed in these reports^1,2.