Threats · 2h ago
Binance says attackers stole about $6.34 billion in digital assets on October 29 after a months-long campaign compromised three engineers and reached its wallet-signing systems; the FBI attributed the theft to North Korea-linked TraderTraitor.
The campaign began in June with a tampered Homebrew download on a Wallet DevOps engineer’s computer. Binance replaced the device and reset credentials, but attackers had learned his role and colleagues. In September, staged interviews on a real job platform led a second engineer to run a malicious code repository posing as a take-home assignment. In October, that infected system and an internal AI tool helped attackers gain control of two more engineers’ systems; Binance has not explained the tool’s role. On October 29, credentials from the first engineer enabled a container deployment from the third engineer’s system into wallet signing.
For exchanges whose engineers’ workstations can reach signing systems, the first device was only one foothold: replacing it and resetting credentials did not erase the team knowledge later used to target colleagues.
5 sources covering this story
Binance says hackers who stole billions in crypto spent months planning heist
Techniques included laptop infections, compromised internal tooling, and fake job interviews.
Rigged Coding Assignment, Abused AI Tool Opened Path to $6 Billion Binance Heist
Binance’s first incident report traces the record theft to a months-long campaign that compromised three engineers’ computers.
Fake job interview opened the door to $6.34 billion Binance heist - Help Net Security
The $6.34 billion Binance hack began with a tampered software download and a fake job interview that gave North Korean attackers a way in.
Binance says fake job interview led to $6.3 billion crypto heist
Cryptocurrency exchange Binance says North Korean hackers used a fake job interview to trick an employee into installing malware that ultimately let them compromise the company's wallet infrastructure and steal about $6.34 billion in digital assets.
Binance Reveals How Fake Job Interviews and AI Tool Abuse Led to $6.43 Billion Theft
Binance says a $6.43 billion crypto theft involved trojanized Homebrew, fake job interviews, compromised engineers, and abuse of internal AI tooling.
Part of the PlainSec briefing for 2026-11-04