Binance discloses $6.3 billion crypto heist via fake job interviews
Original title: Binance Reveals How Hackers Pulled Off $6.3 Billion Crypto Heist Using Fake Job Interviews
Hackers stole $6.34 billion from Binance's wallet signing service using compromised developers and EIP-7702 abuse; $2.85 billion intercepted.
On October 29, 2026, attackers stole approximately $6.34 billion from Binance through a scheme involving fake recruitment interviews and compromised developer endpoints. The FBI attributes the activity to North Korea’s TraderTraitor cluster. Binance absorbed the financial loss after freezing or intercepting about $2.85 billion and replenished 98% of the affected token assets by October 31. The investigation remains ongoing.
Unconfirmed: FBI attribution to North Korea’s TraderTraitor cluster
- Compromised engineers downloaded tampered Homebrew installer and fake assignment repository.
- Unauthorized transfers used stolen credentials and malicious blockchain authorizations.
- Binance cleared delegation at 00:10 UTC on October 30 after multi-party computation setup.
Impact: theft of $6.34 billion in digital assets from internal wallet signing service
| Product | Affected |
|---|---|
| Binance wallet signing service | — |
- Vendors
- Binance
- Threat actors
- TraderTraitor
- Victims
- Binance
- Countries
- North Korea
From the original article
2 min read at gbhackers.com
Binance has revealed that attackers carried out a sophisticated scheme involving fake recruitment interviews, compromised developer endpoints, and malicious blockchain authorizations to steal approximately $6. 34 billion in digital assets on October 29, 2026.
By Divya · gbhackers.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.