Binance is now sharing more information about the major hack that resulted in $6.3 billion being stolen from the crypto exchange last week.

The cryptocurrency company previously called the incident a "security issue" and a third-party research firm traced the crime back to a nefarious North Korean hacking group.

Now, we know more about the security issue from a recent public statement from Binance detailing what happened. What led to more than $6 billion being stolen? Hackers utilized social engineering tactics on a Binance employee by pretending to interview them for a fake job at another company.

According to Binance, the company had "detected and prevented" dozens of attacks from North Korean actors throughout 2026. One such attack occurred when a Binance engineer downloaded a malicious Homebrew installer while attempting to install a popular AI coding tool they had found through a search engine. While the Binance team prevented this attack from succeeding, the incident revealed the engineer's role and the identities of their colleagues on Binance's wallet infrastructure team to the hackers.

In September, a different Binance engineer was contacted through a job-hunting platform and went through multiple interview rounds for a company that turned out to be nonexistent. After building trust with the engineer, the hacker posing as an employee at the fake company asked the Binance engineer to download an assignment as part of the interview process. This download included malicious code.

The hacker took control of the Binance engineer's computer and used it to access the first engineer's system as well as a third Binance employee's computer.

Source link