The $6.3B Binance hack wasn't some zero-day magic. It was social engineering 101.
June: wallet dev downloads a fake tool from a promoted search ad. Binance spots it but damage already done.
September: another engineer "interviews" with a fake company, downloads malicious code.
Oct 20: attackers pivot through that machine + an internal AI tool, compromise two more wallet devs.
Oct 29: they run the script. 233M $XRP drained from five hot wallets in 4 minutes.
FBI says North Korea. Pyongyang says no.
Fake job interviews. Promoted malware ads. The oldest tricks in the book still work on the biggest exchange in crypto.
This wasn't a tech failure. It was a people failure.
June: wallet dev downloads a fake tool from a promoted search ad. Binance spots it but damage already done.
September: another engineer "interviews" with a fake company, downloads malicious code.
Oct 20: attackers pivot through that machine + an internal AI tool, compromise two more wallet devs.
Oct 29: they run the script. 233M $XRP drained from five hot wallets in 4 minutes.
FBI says North Korea. Pyongyang says no.
Fake job interviews. Promoted malware ads. The oldest tricks in the book still work on the biggest exchange in crypto.
This wasn't a tech failure. It was a people failure.
