[Wu Blockchain News] Binance Hack Timeline: How Attackers Compromised Three Engineers to Access Walle...

Binance traced its recent wallet compromise to three engineers hit by separate social-engineering attacks, beginning in June when a Wallet DevOps engineer downloaded a tampered Homebrew installer while setting up an AI coding tool; Binance detected the incident, replaced the device and rotated credentials, but information on the engineer and colleagues had already been exposed. In September, a second engineer downloaded a malicious code repository during a fake job interview, compromising his work computer. On October 20, attackers used that device and an internal AI tool to gain control over Engineers A and C and found a container deployment permission token on A's computer; on October 29 they accessed C's computer, used A's stolen credentials to deploy a container running a malicious script, and initiated unauthorized asset transfers through Binance's internal wallet signing service. The timeline, based on Binance's preliminary investigation, matters because it shows the breach originated in developer endpoints and social engineering rather than the exchange's core wallet infrastructure. What to watch next is Binance's full post-mortem and whether it tightens endpoint, credential and AI-tool access controls across engineering teams.