Updated
Updated · Reuters · Nov 3
Hackers Drained $6.3 Billion From Binance Using Fake Job Interview
Updated
Updated · Reuters · Nov 3

Hackers Drained $6.3 Billion From Binance Using Fake Job Interview

3 articles · Updated · Reuters · Nov 3

Summary

  • $6.3 billion in crypto was stolen from Binance after attackers compromised three engineers’ computers in a campaign that began in June and culminated on Oct. 29.
  • Binance said the breach started with tampered software in an online ad, then a fake job process in September that tricked another engineer into downloading malicious code and meeting a fictitious CEO.
  • 233.46 million XRP was pulled from five hot wallets in four minutes, and the final unauthorized transfer came nearly four hours later despite Binance freezing withdrawals and revoking permissions.
  • Binance said it has frozen about $2.85 billion of assets, will repay affected customers, and is increasing spending on AI-based detection and a new security research fund.
  • The FBI has blamed a North Korean hacking group for the record heist, an accusation Pyongyang rejects, renewing scrutiny of crypto security and fake-interview espionage tactics.

Insights

Binance's safety fund couldn't cover the massive $6.3 billion loss, so where is the money to reimburse users actually coming from?
If hackers can use AI and fake CEOs to steal billions, is any crypto exchange truly safe from human error?
With billions frozen by centralized issuers after the heist, does this record-breaking theft signal the death of truly decentralized finance?