🚨 🚨 🚨 🚨 🚨 🚨 🚨 🚨 🚨 🚨
The Biggest Crypto Heist in History: North Korean Hackers and the Binance Attack Breakdown
This is now officially the largest crypto theft ever recorded — dwarfing everything before it. It wasn't a smart contract bug or a single phishing email. It was a 5-month infiltration.
*The scale*
- *Amount stolen:* $6.34 billion on October 29, 2026
- *Previous record:* Bybit in 2025, $1.5 billion — this is roughly 4x larger
- *Before that:* Axie Infinity / Ronin in 2022, $590 million
- *Impact:* Bitcoin dropped below $77,000 and over $1.5 billion in leveraged positions were wiped out in the immediate sell-off
Binance says it has already replenished 98% of affected tokens from corporate funds and its SAFU / insurance funds, and that customers will lose nothing. About $2.85 billion has been frozen or intercepted so far.
*How the attack unfolded — Binance's Nov 3 report*
Binance described it as a "sophisticated multi-stage campaign" that began in June, not a smash-and-grab.
- *June - Supply-chain compromise:* A Wallet DevOps engineer downloaded a tampered version of Homebrew for a popular AI coding tool from a search engine. That gave attackers an initial foothold.
- *September - Fake job interview:* A second software engineer was contacted on a recruitment platform. He went through two rounds of interviews, including a live video with a supposed HR rep who shared a personal social media account. The interview process delivered malware to his laptop.
- *Oct 20 - Lateral movement via internal AI tool:* Attackers used the second engineer's compromised computer and Binance's internal AI tool to take control of the computers of two wallet-team engineers, one of whom had permission to deploy software.
- *Oct 29 - The drain:* They logged into a third engineer's computer, used credentials stolen from the first engineer, and triggered a malicious script to access the transaction-signing service. Over nearly 4 hours, they drained hot wallets across 10 blockchains.
#Binance
The Biggest Crypto Heist in History: North Korean Hackers and the Binance Attack Breakdown
This is now officially the largest crypto theft ever recorded — dwarfing everything before it. It wasn't a smart contract bug or a single phishing email. It was a 5-month infiltration.
*The scale*
- *Amount stolen:* $6.34 billion on October 29, 2026
- *Previous record:* Bybit in 2025, $1.5 billion — this is roughly 4x larger
- *Before that:* Axie Infinity / Ronin in 2022, $590 million
- *Impact:* Bitcoin dropped below $77,000 and over $1.5 billion in leveraged positions were wiped out in the immediate sell-off
Binance says it has already replenished 98% of affected tokens from corporate funds and its SAFU / insurance funds, and that customers will lose nothing. About $2.85 billion has been frozen or intercepted so far.
*How the attack unfolded — Binance's Nov 3 report*
Binance described it as a "sophisticated multi-stage campaign" that began in June, not a smash-and-grab.
- *June - Supply-chain compromise:* A Wallet DevOps engineer downloaded a tampered version of Homebrew for a popular AI coding tool from a search engine. That gave attackers an initial foothold.
- *September - Fake job interview:* A second software engineer was contacted on a recruitment platform. He went through two rounds of interviews, including a live video with a supposed HR rep who shared a personal social media account. The interview process delivered malware to his laptop.
- *Oct 20 - Lateral movement via internal AI tool:* Attackers used the second engineer's compromised computer and Binance's internal AI tool to take control of the computers of two wallet-team engineers, one of whom had permission to deploy software.
- *Oct 29 - The drain:* They logged into a third engineer's computer, used credentials stolen from the first engineer, and triggered a malicious script to access the transaction-signing service. Over nearly 4 hours, they drained hot wallets across 10 blockchains.
#Binance
