In one of the largest cryptocurrency thefts ever recorded, hackers stole $6.3 billion from Binance by exploiting fake job interviews and a compromised internal AI tool, the exchange has revealed. The sophisticated, multi-stage campaign targeted Binance engineers through social engineering tactics, ultimately draining billions in crypto from the platform's wallets.
How the Attack Unfolded
According to Binance's initial findings, the hackers used a legitimate job-hunting platform to contact an engineer, inviting him to bogus interviews with fake company representatives. To build trust, they shared social media accounts containing personal images. During a second interview, the engineer was instructed to download malware disguised as an assignment, which deployed malicious code using obfuscation techniques to evade detection.
The compromised computer, along with a compromised internal AI tool, then allowed hackers to gain control over two other engineers' laptops in October and execute the next steps of the attack. Binance described the incident as a "serious and highly sophisticated security incident" and apologized, stating, "this should not have happened."
Impact and Response
The attack forced Binance to suspend withdrawals globally, leaving users unable to access their funds until the service was restored on Sunday. Upon reopening, customers withdrew billions of dollars worth of assets. The company has since set aside more than 100% of the funds needed to cover the loss, with 98% of the affected token assets replenished as of Saturday. Binance is working with law enforcement to trace and freeze the stolen assets.
US crime agencies, including the FBI and Secret Service, are assisting with the investigation. Cyber analysts suggest the hack bears the hallmarks of North Korea, which has denied involvement. Kim Yo Jong, a top DPRK official, called the accusations a "sinister attempt" by the US to damage North Korea's image. Binance had previously not commented on North Korea's alleged involvement but cited the FBI's latest information pointing to the DPRK.
Security Overhaul
In response, Binance plans to increase investment in AI tools for threat detection, engage third-party cyber experts for a full review, and establish a security research fund. The company will also collaborate with leading AI and security firms on targeted initiatives to prevent future breaches.
This record $6.3bn hack surpasses previous major crypto thefts, underscoring the growing sophistication of cybercriminals targeting digital asset platforms. As investigations continue, the incident highlights the critical need for robust security measures in the cryptocurrency industry.
