The US Federal Bureau of Investigation said the the biggest crypto heist in history was carried out by a North Korean state-sponsored unit known as TraderTraitor.
"We had already covered $6B of the impacted amount of the hacked loss," Binance said on X on Saturday, after saying earlier that it had covered 90 per cent of the stolen funds.
The remaining amount, now less than 10 per cent, consists of assets that are less liquid and may take longer to source in the required amounts, according to Binance.
Earlier on Saturday the FBI said the North Korean state-sponsored unit known as TraderTraitor was responsible for Friday's attack.
North Korea has for years denied using state-linked cyber units for espionage, financial theft and revenue. Its mission in Geneva and embassy in China did not respond to requests for comment.
Members of the unit were observed by law enforcement converting stolen assets into the cryptocurrency ethereum, the FBI said in a statement, adding that it expects "further laundering" of the assets through the use of related technology.
Analysts had previously blamed North Korea and said it could be the largest financial heist of all time.
Binance has been working with industry partners to freeze some of the affected assets, with about $US3 billion ($A4.25 billion) located as of Friday.
The company has repeatedly said it would bear the financial impact of the funds stolen in the hack.
The money spent re-buying tokens came from using part of its $US1 billion ($A1.4 billion) Secure Asset Fund for Users, a bitcoin reserve it holds to protect customers in the event of security breaches, as well as some of its Futures Insurance Fund, and the company's own corporate treasury, it said on X.
Co-CEO Yi He said on Saturday that 50 per cent of its SAFU funds would be used, while the company said it was committing to replenishing the fund to return it to about $US1 billion.
Crypto prices fell on Friday, while Binance sought to reassure customers that their funds were safe after the hack.
Co-CEO Richard Teng had said that the breach was a "complex attack" involving a compromised laptop and malicious software designed to delete evidence of its activity, making it harder to trace and investigate.
After the hack, the exchange stopped allowing customers to withdraw their funds, but it said on Saturday it was still on track to reopen withdrawals on Sunday.
Withdrawals were not open on Sunday.
Binance said it has set aside around $US6.34 billion ($A9.02 billion) of company funds internally to cover the losses.
Users holding the 10 listed tokens - BTC, ETH, USDT, BNB, SOL, USDC, XRP, USD1, RLUSD, and ZEC - would be able to verify that their assets were backed at a minimum ratio of 1:1 once the full proof was available, it said.
