Binance says hackers used fake job interview and AI tool in $6.3B heist

· Tech

Binance published a postmortem saying the largest crypto theft to date combined well-known hacking techniques over several months. The process began in June when a developer downloaded a tampered installer spread through a malicious Google ad, exposing his work computer; a later fake job interview, with an assignment requiring malicious code, gave attackers a further foothold, and an internal AI tool also played a role. Binance said suspected North Korean attackers were behind the $6.3 billion theft. Cybersecurity researchers noted they had warned for years about North Korea's persistent, patient hacking campaigns, yet the exchange was still caught off guard. The disclosure shifts attention to hiring and developer-workstation practices at crypto and tech firms.

Why it matters：It shows that supply-chain and social-engineering attacks can breach even major crypto exchanges, pushing the industry toward stricter vetting of hiring pipelines and developer machines.

Key points

  • The breach started in June with a tampered installer spread via a malicious Google ad.
  • Attackers used a fake job interview whose assignment required downloading malicious code.
  • Binance attributes the $6.3 billion theft to suspected North Korean hackers.

Sources (original reporting)

More stories from this day