It seems Binance sets aside funds in what has been dubbed a #SAFU account, so the loss will be covered at no expense to users. A security review is estimated to take about a week to prevent similar attacks. No deposits or withdrawals during the review period, while other exchanges have also locked down to varying degrees for security and procedural reviews, while some including coinbase have offered donations to Binance.
Security audits and reviews should be ongoing processes, not just after the loot has bolted.