Binance hit by $6.3B theft via fake interviews, malware
6.8 Security Binance lost $6.3 billion in a cyberattack using fake interviews and malware. The company recovered 98% of the stolen funds and froze $2.85 billion in assets.
Binance experienced a major security breach, losing over $6.3 billion in cryptocurrencies after a sophisticated cyberattack that spanned several months. The attackers, reportedly linked to North Korea, used a combination of fake job interviews, social engineering, malicious software downloads, and exploitation of internal AI tools to infiltrate Binance’s systems. The incident began in June 2026, when an engineer downloaded an infected development tool, granting hackers access to sensitive employee data. In September, another engineer was targeted through a job platform and tricked into installing malware during a simulated interview, further compromising the platform. This access allowed the attackers to breach Binance’s digital wallet signature infrastructure and authorize unauthorized transfers. Binance has since replenished 98% of the stolen assets using its own funds, frozen $2.85 billion in assets, and engaged independent cybersecurity experts for a thorough review.
