Binance says months-long campaign behind record $6.3 billion theft

· Cybersecurity

Binance disclosed that the theft of roughly $6.3 to $6.43 billion in digital assets, discovered in October, resulted from a sophisticated, multi-stage campaign rather than a single intrusion. The exchange said attackers used recruitment-themed social engineering, including fake job interviews, alongside a tampered Homebrew installation to compromise two engineers, and combined other techniques to reach its wallet infrastructure. Binance's chief executive described it as a months-long operation; North Korea denied responsibility for the heist. Security analysts noted that the record loss stemmed from weak system separation and inadequate controls that let one compromised laptop escalate into systemic exposure. The case is now a benchmark for how AI-assisted social engineering and supply-chain tampering can turn a single employee mistake into multi-billion-dollar losses.

Why it matters：The largest crypto theft on record shows how AI-assisted social engineering and supply-chain compromise can bypass perimeter defenses at even well-funded firms, pushing exchanges and custodians to rethink segregation of wallet infrastructure.

Key points

  • Attackers used fake job interviews and a tampered Homebrew install to compromise two engineers.
  • The loss was discovered in October and estimated at roughly $6.3–6.43 billion.
  • North Korea denied responsibility for the theft.

Sources (original reporting)

More stories from this day