Binance says hackers used fake job interview to compromise computer before $6.3 billion attack
Binance said attackers used fake interviews and malicious code to steal $6.34 billion, while $2.85 billion has been frozen, investigators said.
- On October 29, 2026, attackers siphoned roughly $6.3 billion from Binance wallets in what the FBI attributed to North Korea's TraderTraitor group, though Pyongyang has rejected the claim.
- Hackers orchestrated a months-long campaign beginning in June, using tampered developer tools and fake job interviews to compromise Binance engineers and gain internal access to wallet infrastructure.
- Binance reported the attackers utilized a compromised internal AI tool and malicious code repositories to manipulate transaction sequences, with the 'Contagious Interview' campaign tricking engineers into granting full account control.
- Roughly 98% of affected customer balances have been replenished by Binance using its corporate treasury and internal reserve funds, while the exchange works with the FBI and Secret Service to recover remaining assets.
- Regulators at the Federal Reserve and the Office of the Comptroller of the Currency contacted banks last week to assess vulnerabilities, while Binance increases investment in AI-enabled detection to prevent future breaches.
373 Articles
373 Articles
The platform’s own report reveals that North Korean hackers spent five months cheating on their engineers before emptying their wallets. Binance claims to have recovered almost everything stolen, while some $2.850 million was frozen or intercepted.
Analysts See no Broader ‘Contagion’ Effect after $6.3B Binance Hack
Binance’s pledge to cover user losses from its $6.3 billion hack helped contain the fallout across crypto markets, analysts told Cointelegraph. “There doesn’t seem to be any contagion-type effect from the hack, given that Binance is able to cover the losses using its balance sheet,” Martin Lee, market insights lead at DWF Labs, told Cointelegraph. […]
To commit the theft, the attackers exploited infected computers, internal access points, and the transaction signing system.
Behind the blow of the century to the leading platform of the cryptocurrencies the colossal naiveties of its engineers, but also the great skill of the North Korean attackers, who have prepared the operation for months. The first hook, as often happens, on LinkedIn
A fake job interview and an AI program with malicious code were among the hackers' tools when Binance was hit by the 'largest heist in history'
Coverage Details
Bias Distribution
- 39% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
