Binance says fake job interviews used in $6.3bn hack blamed on North Korea

· Cybersecurity · North Korea · United States

Binance said a record $6.34 billion crypto heist was carried out using fake job interviews and malicious software, and linked the attack to North Korean hackers. An engineer was contacted through a legitimate job-hunting platform and invited to bogus interviews with fake company representatives; the exchange said an internal AI tool was also used. More than $6 billion was drained in under an hour and withdrawals were paused for almost two days before Binance replenished 98% of affected assets. North Korea denied the allegation: Kim Yo-jong, sister of leader Kim Jong Un, called the FBI's accusation "absurd rhetoric" and said dialogue with the US is an option but not a must for national interest. The US reiterated concerns over North Korean cybercrime.

Why it matters：The heist is among the largest crypto thefts ever and highlights how state-linked hackers exploit hiring pipelines and AI tooling, pushing exchanges and governments to tighten crypto custody and cyber defences.

Key points

  • Hackers used fake job interviews and an internal AI tool, Binance said.
  • Over $6 billion was drained in under an hour; Binance has replenished 98% of assets.
  • Kim Yo-jong dismissed US allegations as "absurd" and left dialogue open but optional.

Sources (original reporting)

More stories from this day