Binance co-founder Yi He: 57 suspected North Korea-linked cyber threats intercepted this year

Binance co-founder Yi He disclosed on November 3 that the exchange’s security team identified and blocked 57 suspected North Korea-linked cyber threats in 2026. The attack methods included fake job interviews, malware disguised as popular developer tools, trojanized software packages and browser extensions, fraudulent video-conferencing apps, and social-engineering campaigns designed to steal credentials or deploy remote-access malware. The disclosure matters because Binance is the largest crypto exchange by volume, and North Korea-linked actors have been tied to high-profile crypto hacks and thefts. It was not specified how many of the 57 cases were confirmed as North Korean or whether any funds or user data were compromised. Watch for further attribution details from Binance and any regulatory or law-enforcement follow-up on the campaign.