Binance Links $6.3 Billion Crypto Heist to Fake Job Interview

Cryptocurrency exchange Binance has attributed a theft of roughly $6.34 billion in digital assets to attackers linked to North Korea, who it says gained an initial foothold through a fake job interview.

According to the exchange, an employee was deceived into installing malware during what was presented as a recruitment interview. BleepingComputer reported that this access eventually allowed the attackers to compromise Binance's wallet infrastructure. Binance said the intrusion relied on a combination of methods, including social engineering through fake recruitment interviews, as reported by The Record.

Binance's investigation found that the hackers used compromised employee computers and stolen credentials to reach its wallet systems, according to Cointelegraph. CoinDesk reported that the operation was built over many months, with the attackers compromising employees and internal systems before targeting the exchange's hot-wallet signing infrastructure through Ethereum's EIP-7702 mechanism.