Binance hack: $6.3B stolen after fake job interview targeted developer
Hackers drained $6.3 billion in cryptocurrency from Binance on October 29 after using a bogus job interview and a tampered artificial intelligence tool to hijack internal developer systems. Global crypto investors and international exchanges are navigating the fallout as the platform works to refund affected users and regulatory bodies respond to the breach.
Sophisticated social engineering and malicious code compromise exchange wallets
The security breach began in June when an employee from Binance‘s wallet developer team downloaded an AI coding tool that had been tampered with. Although the crypto exchange detected the breach, replaced the device, and changed credentials, the employee’s role remained exposed to the attackers.
In September, a second software engineer seeking a new job downloaded a malicious code repository onto a computer after meeting virtually with the chief executive of a fictitious company. By October 20, the attackers used that compromised computer alongside an internal AI tool to gain control of the systems belonging to both wallet developers.
On October 29, the perpetrator utilized the second developer’s computer and stolen credentials from the first developer to trigger a malicious script, executing what stands as potentially the largest financial heist on record.
In the wake of the attack, Binance clients pulled $4.7 billion from the platform. The exchange stated it is repaying all customers who lost funds and is increasing investments in artificial intelligence-enabled detection, alongside plans for a security research fund and initiatives with leading AI technology firms.
The UAE’s Financial Services Regulatory Authority (FSRA) issued an official statement following the security breach. Meanwhile, the Federal Bureau of Investigation has attributed the attack to a North Korean hacking group, a claim that North Korea has rejected.
