Binance Details $6.3 Billion Crypto Heist via Fake Job Interview and AI-Assisted Intrusion
Binance disclosed details of a $6.3 billion cryptocurrency theft that occurred on October 29, 2026, potentially the largest financial heist on record. Attackers combined social engineering, a trojanized AI tool, and abuse of Binance's internal AI system to compromise employee workstations and ultimately access wallet infrastructure. The campaign began in June when a wallet development team member downloaded a compromised AI tool; despite remediation, the attackers retained visibility into the team's functions. In September, a second engineer was lured through a fake job interview involving a fraudulent CEO video call, leading to the download of a malicious code repository that compromised another wallet-team device. On October 20, attackers leveraged the infected machine together with Binance's internal AI tool to seize control of two wallet developers' systems, culminating on October 29 in execution of a malicious script using stolen credentials that triggered the theft. The FBI attributed the attack to a North Korean hacking group, an accusation rejected by North Korea's government. Binance is reimbursing all affected customers.
Detalhes técnicos
The intrusion chain involved: (1) a trojanized AI tool downloaded in June compromising a wallet developer's workstation; (2) a fake recruitment process in September using a staged video interview with a fictitious CEO to deliver a malicious code repository to a second engineer; (3) abuse of Binance's internal AI tool on October 20 combined with the compromised device to take control of two wallet developers' systems; (4) on October 29, execution of a malicious script using the second developer's machine and credentials stolen from the first, triggering the $6.3 billion theft.
Remediação
Binance stated it is reimbursing all customers who lost funds and announced plans to expand AI-based detection tooling, establish a security research fund, and launch collaborative security projects with leading AI companies.
Linha do tempo
-
Binance Details $6.3 Billion Crypto Heist via Fake Job Interview and AI-Assisted Intrusion
ler a análise desta fonte ocultar
Binance disclosed details of a $6.3 billion cryptocurrency theft that occurred on October 29, 2026, potentially the largest financial heist on record. Attackers combined social engineering, a trojanized AI tool, and abuse of Binance's internal AI system to compromise employee workstations and ultimately access wallet infrastructure. The campaign began in June when a wallet development team member downloaded a compromised AI tool; despite remediation, the attackers retained visibility into the team's functions. In September, a second engineer was lured through a fake job interview involving a fraudulent CEO video call, leading to the download of a malicious code repository that compromised another wallet-team device. On October 20, attackers leveraged the infected machine together with Binance's internal AI tool to seize control of two wallet developers' systems, culminating on October 29 in execution of a malicious script using stolen credentials that triggered the theft. The FBI attributed the attack to a North Korean hacking group, an accusation rejected by North Korea's government. Binance is reimbursing all affected customers.
Technical Details
The intrusion chain involved: (1) a trojanized AI tool downloaded in June compromising a wallet developer's workstation; (2) a fake recruitment process in September using a staged video interview with a fictitious CEO to deliver a malicious code repository to a second engineer; (3) abuse of Binance's internal AI tool on October 20 combined with the compromised device to take control of two wallet developers' systems; (4) on October 29, execution of a malicious script using the second developer's machine and credentials stolen from the first, triggering the $6.3 billion theft.
Remediation
Binance stated it is reimbursing all customers who lost funds and announced plans to expand AI-based detection tooling, establish a security research fund, and launch collaborative security projects with leading AI companies.