Skip to content
NewA calmer, faster ZeroHour
StoryData breachcriticalExploited in the wild

North Korean Hackers Steal $6.34B From Binance Hot Wallets

17 sources · 19 articlesFirst reported Updated ()
What's new

First merged summary.

Merged summary · x-ai/grok-4.7 · rewritten as coverage arrivesSummaries by Vani AI

North Korea's TraderTraitor group stole $6.34 billion from Binance on October 29, 2026, using a compromised laptop and fake job interviews; $2.85 billion was frozen.

North Korea's TraderTraitor group stole about $6.34 billion from Binance hot wallets on October 29, 2026, through a months-long campaign. Attackers began in June with a tampered Homebrew AI coding tool on a developer's laptop, followed in September by fake job interviews that installed malware. They exploited internal AI tools, container tokens, and Ethereum EIP-7702 delegation to redirect wallet signing and drain funds in 20 minutes, including 233.46 million XRP and other assets. Binance absorbed the loss from reserves, froze $2.85 billion in laundered funds, replaced 98% of assets by October 31, and stopped 57 suspected attacks that year. The FBI attributes the theft to the group, which denies involvement.

Key facts
  • Campaign began June with tampered Homebrew AI tool on developer laptop
  • September fake job interviews installed malware in coding exercises
  • October 29: $6.34B stolen from hot wallets in 20 minutes via EIP-7702
  • Binance froze $2.85B, replaced 98% by October 31 from reserves
  • Linked to TraderTraitor by FBI; North Korea denies responsibility
  • Transfers involved 11 blockchains and 12,000 wallets
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

Timeline

dated events in the reporting · oldest first
  1. Oct 29, 2026Attackers stole $6.34B from Binance hot wallets in 20 minutes · Dark Reading
  2. Oct 29, 2026Fake job interview malware deployed to engineer · The Record
  3. Oct 30, 2026Binance cleared unauthorized delegation to zero address · Cyber Security News
  4. Oct 31, 202698% of stolen tokens replaced from reserves · Cyber Security News

What each outlet adds

beyond the shared facts
  • Dark ReadingInitial access via compromised developer laptop and Ethereum delegation
  • Cyber Security NewsSpecific transfers of 233M XRP, 970k SOL and 98% replacement by Oct 31
  • The RecordMonths-long campaign, 57 prior attacks, CEO post-mortem
  • SecurityWeekFunds moved through 12,000 wallets on 11 blockchains
  • Help Net SecurityEIP-7702 wallet signing exploitation and fake CEO recruiter
Vendors
Binance
Products
binance wallethot walletcryptocurrencieshot wallets
Threat actors
TraderTraitorLazarus GroupNorth Korean hackersDemocratic People's Republic of Korea
Malware
MacSync Stealerzero-day malware
Victims
Binance
Organizations
NCC GroupFBIEllipticCoinDesk
Countries
North KoreaUnited States

Coverage

oldest first · one row per article · UTC
  1. · 6d ago Dark ReadingFirst report

    Binance Hack Shows Need for Independent Safeguards After $6.3B Loss

    Attackers used a compromised developer laptop and Ethereum delegation to drain $6.3B from Binance hot wallet in 20 minutes.

  2. · 6d ago Hacker News · security

    Hackers use fake job interview to breach Binance before $6.3B attack

    Binance suffered a $6.3 billion attack after hackers compromised a computer using a fake job interview.

  3. · 5d ago Cyber Security News

    Fake job task and hijacked AI tool in $6.34 billion Binance theft

    Attackers used a stolen deployment token and EIP-7702 delegation; about $2.85 billion was frozen or intercepted.

  4. · 5d ago The Record

    Binance says months-long campaign stole $6.3 billion in crypto

    FBI blames North Korea’s TraderTraitor; Pyongyang denies it, and about $2.85 billion was frozen.

  5. · 5d ago The Hacker News

    Binance reveals $6.43 billion theft via fake job interviews and AI tool abuse

    A North Korea-linked campaign stole $6.43 billion from Binance using social engineering and tampered AI tools.

  6. · 5d ago Hacker News · security

    Binance hackers used fake job interviews and AI tools to steal $6.3B

    Attackers stole $6.34 billion from Binance using fake developer tool installations and job interview lures that delivered malware into AI tools; 98% of funds replenished.

  7. · 5d ago WIRED · Security

    Binance hack attributed to North Korean group steals $6.34 billion

    Hackers compromised engineers through fake job interviews to access wallet signing service and move funds across blockchains.

  8. · 5d ago Security Affairs

    Binance hack exposes $6.34 billion theft

    Binance attributes $6.34 billion theft to North Korea-linked Lazarus Group using fake job interviews and AI abuse.

  9. · 5d ago TechCrunch · Security

    North Korean hackers steal $6.3B from Binance

    Hackers used fake recruiter contacts to trick an engineer into downloading malware, stealing $6.3 billion in crypto.

  10. · 5d ago BleepingComputer

    Binance loses $6.3 billion in fake job interview malware attack

    North Korean hackers used fake job interviews to install custom malware and steal $6.34 billion from Binance's wallet infrastructure.

  11. · 5d ago The Register · Security

    North Korean hackers used fake job interview to breach Binance

    Binance engineer downloaded malware during fake job interview, enabling $6.3B theft via social engineering and AI tooling.

  12. · 5d ago GBHackers

    Binance discloses $6.3 billion crypto heist via fake job interviews

    Hackers stole $6.34 billion from Binance's wallet signing service using compromised developers and EIP-7702 abuse; $2.85 billion intercepted.

  13. · 5d ago Infosecurity Magazine

    Binance Hackers Used Fake Interviews to Steal Record-Breaking Cryptocurrency

    Attackers stole 233.46 million XRP, 970,500 SOL and 44.2 million OP from Binance hot wallets using compromised engineer credentials.

  14. · 5d ago Help Net Security

    Fake Job Interview Led to $6.34 Billion Binance Heist

    Hackers used fake job offers to compromise Binance engineers and steal $6.34 billion.

  15. · 5d ago SecurityWeek

    $6.34 Billion Stolen From Binance by North Korean Hackers

    Hackers stole $6.34 billion from Binance using fake job interviews and internal AI tools.

  16. · 5d ago Ars Technica · Security

    Binance hackers stole $6.34 billion in crypto after months of planning

    Hackers used fake job interviews, tampered software, and compromised AI tools to breach Binance and exfiltrate assets.

  17. · 5d ago Ars Technica · Security

    Binance loses billions to North Korean hackers

    Hackers stole $6.34 billion in cryptocurrency from Binance after months of planning using social engineering and malware.

  18. · 4d ago Risky Business News

    North Korea-linked hackers steal $6.3 billion from Binance

    Binance froze $2.8 billion in stolen stablecoins after a $6.3 billion heist by the TraderTraitor group.

  19. · 3d ago CSO Online

    Binance Heist Exposes AI Governance and Security Failures

    Attackers stole $6.34 billion from Binance using malware on developer machines and an internal AI tool to pivot to additional systems.