Binance hackers stole $6.34 billion in crypto after months of planning
Original title: Binance says hackers who stole billions in crypto spent months planning the heist
Hackers used fake job interviews, tampered software, and compromised AI tools to breach Binance and exfiltrate assets.
Binance confirmed that sophisticated hackers stole $6.34 billion in cryptocurrency from its exchange after a multi-stage campaign. The threat actors began no later than June and used social engineering via fake recruitment interviews along with malicious downloads, endpoint compromises, and internal AI tooling. Binance froze or intercepted $2.85 billion and set aside funds to cover the loss.
- Binance hot wallets sent 970500 SOL and 44200000 OP to attacker addresses
- 18,270 BTC were sent to attacker-controlled addresses
- Attackers used EIP-7702 mechanism to give smart contracts execution rights over hot wallets
- Specialized revocation procedure was required due to MPC hot wallets
- Binance provided Proof of Reserves page for verification
Impact: $6.34 billion cryptocurrency theft
| Product | Affected | Fixed in |
|---|---|---|
| Binance hot wallets | — | 2.85 billion |
- 1.verify Proof of Reserves
- 2.monitor hot wallet transfers
- Vendors
- Binance
- Threat actors
- North Korean actors
- Victims
- Binance
- Organizations
- FBITRM Security
- Countries
- North Korea
From the original article
4 min read at arstechnica.com
Techniques included laptop infections, compromised internal tooling, and fake job interviews.
By Dan Goodin · arstechnica.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.