Binance Attackers Used Fake Job Interviews To Pull Off $6.3 Billion Crypto Heist

Binance disclosed that a sophisticated cyberattack tied by the FBI to North Korea cost the exchange $6.34 billion in digital assets, with the theft traced to an October 29 breach. The attackers spent months laying groundwork: in June, a wallet DevOps engineer downloaded a tampered Homebrew install of a popular AI coding tool, exposing colleagues' information, and in September a software engineer was targeted through a legitimate job platform by a fake "Project Director." That engineer sat through two interview rounds—a live video call with an HR representative who shared a personal social account to build trust, then a chat-app interview with a purported CEO—before downloading an assignment file whose malware executed during setup. The incident underscores how social engineering, rather than pure technical exploits, is becoming a primary threat vector for crypto infrastructure, and highlights Binance's exposure as one of the industry's largest custodians. Watch for whether Binance tightens developer tooling and hiring-channel verification, and for further attribution and recovery details from the FBI.