Binance Reveals How Hackers Used Fake Job Interviews to Pull Off $6.34B Attack
What started with a fake job interview eventually led to one of the biggest security incidents in crypto.
Binance says hackers tricked an employee into downloading malicious code disguised as a coding assignment. They later used the compromised device and an internal AI tool to gain access to other engineers’ systems and reach the exchange’s wallet infrastructure.
The October 29 attack impacted around $6.34B in digital assets. Binance says $2.85B has been frozen or intercepted, while 98% of affected assets have been replenished.
The FBI has attributed the attack to North Korea. Binance also revealed it detected and prevented 57 suspected North Korea-linked cyber threats throughout 2026.
Since the incident, the exchange has rebuilt affected systems, strengthened security controls and brought in independent cybersecurity experts to review what happened.
What started with a fake job interview eventually led to one of the biggest security incidents in crypto.
Binance says hackers tricked an employee into downloading malicious code disguised as a coding assignment. They later used the compromised device and an internal AI tool to gain access to other engineers’ systems and reach the exchange’s wallet infrastructure.
The October 29 attack impacted around $6.34B in digital assets. Binance says $2.85B has been frozen or intercepted, while 98% of affected assets have been replenished.
The FBI has attributed the attack to North Korea. Binance also revealed it detected and prevented 57 suspected North Korea-linked cyber threats throughout 2026.
Since the incident, the exchange has rebuilt affected systems, strengthened security controls and brought in independent cybersecurity experts to review what happened.
