An Odaily article says Binance disclosed that approximately $6.34 billion in digital assets were stolen in an attack that began in June 2026.
The article says Binance’s preliminary investigation report, released on November 3, showed that during the October 29 incident, attackers used unauthorized access to an internal wallet signing service to initiate transactions outside the normal withdrawal process, involving approximately $6.34 billion in digital assets. The article says the FBI attributed the incident to North Korea. It says the attack chain began earlier: in June 2026, a wallet DevOps engineer downloaded a tampered Homebrew installer; in September, another engineer downloaded a coding assignment as requested during an interview; and in October, attackers used an internal AI tool to take control of both employees’ computers and obtain credentials granting access to core infrastructure. The article says Binance described it as a multi-stage attack.
· The Odaily article says the report stressed that this was a multi-stage attack, not an isolated intrusion or simple phishing attempt.
· The article says employees’ everyday development tools, AI applications, and permission systems could all become points of entry.
The article says Binance’s preliminary investigation report, released on November 3, showed that during the October 29 incident, attackers used unauthorized access to an internal wallet signing service to initiate transactions outside the normal withdrawal process, involving approximately $6.34 billion in digital assets. The article says the FBI attributed the incident to North Korea. It says the attack chain began earlier: in June 2026, a wallet DevOps engineer downloaded a tampered Homebrew installer; in September, another engineer downloaded a coding assignment as requested during an interview; and in October, attackers used an internal AI tool to take control of both employees’ computers and obtain credentials granting access to core infrastructure. The article says Binance described it as a multi-stage attack.
· The Odaily article says the report stressed that this was a multi-stage attack, not an isolated intrusion or simple phishing attempt.
· The article says employees’ everyday development tools, AI applications, and permission systems could all become points of entry.
