Binance Details Fake Job Interviews Behind $6.34 Billion Crypto Heist

Binance has published new details about a cyber attack that led to the loss of roughly $6.34 billion in digital assets. According to a November 3 security report from the exchange, cited by Tom's Hardware, North Korean attackers spent months compromising systems and employees before carrying out the theft, which the report dates to October 29.

Binance described the operation as a multi-stage campaign rather than a single breach or a basic phishing attempt. The exchange said the first known compromise took place in June, when an engineer on its Wallet DevOps team searched online for a popular AI coding tool and downloaded a tampered Homebrew installation. Homebrew is a package manager used by developers to install and manage software on macOS.

Binance said it noticed the unusual activity, replaced the engineer's device, and rotated the associated credentials. According to the report, those steps came too late, because the attackers had already learned about the employee's role and identified colleagues working on the exchange's wallet infrastructure.