Binance Reveals That Bogus Job Interview, AI Played Role in $6.3 Billion Crypto Heist
Binance said North Korean hackers used a bogus job interview, artificial intelligence (AI), and “social engineering” to compromise an engineer’s computer, and took just four minutes to steal $6.3 billion worth of cryptocurrency.
TL;DR
- North Korean hackers allegedly used a sophisticated, multi-stage campaign to steal $6.3 billion in cryptocurrency from Binance.
- The attack involved social engineering through fake recruitment interviews, malicious software downloads, compromised internal AI tooling, and endpoint compromise.
- An engineer downloaded a tampered open-source software package manager to install an AI coding tool, leading to exposure.
- Another employee was targeted via a fake job interview, where they were instructed to download an 'assignment' containing malicious code.
- The malware executed unauthorized activities, stealing XRP, SOL, and OP cryptocurrencies in just four minutes on October 29.
- The FBI identified a North Korean actor known as "TraderTraitor" as responsible.
- North Korea, via Kim Yo Jong, denied the accusations, calling them "absurd rhetoric" and a "grave political provocation."
- Binance stated it had previously detected and prevented 57 suspected North Korea-linked cyber threat cases in 2026.