Binance Reveals How Hackers Carried Out Cyberattack Worth $6.34 Billion
Cryptocurrency exchange Binance has disclosed details of an attack in which digital assets worth about $6.34 billion were stolen. According to the US Federal Bureau of Investigation, hackers linked to North Korea were behind it.
Cryptocurrency exchange Binance has released new details about a cyberattack in which digital assets worth roughly $6.34 billion were stolen. The attack was planned over several months, and the hackers gained access to the company's systems using malware and fake job interviews. According to the US Federal Bureau of Investigation (FBI), the attack was carried out by hackers linked to North Korea.
How the attack unfolded
The first signs of the planned attack were detected in June, when a Binance engineer working on digital wallet infrastructure downloaded a modified installation file of a popular AI programming tool. The company's security systems noticed the suspicious activity and responded, but the attackers had already obtained the information they needed.
In September, the hackers approached a Binance programmer through a genuine job-search platform. Posing as company representatives, they held two job interviews and then sent a practical assignment. The downloaded file contained hidden malware, designed to evade security systems.
On 20 October, the hackers used the infected programmer's computer and the company's internal AI tool to reach the computers of two more employees. On 29 October, using previously stolen passwords and other access credentials, they entered one of those computers and began stealing cryptocurrency.
Aftermath and recovery
Of the $6.34 billion stolen, about $2.85 billion has been frozen. By 3 November, the company had restored the affected wallet systems and internal AI tools, replaced compromised devices and credentials, and tightened security checks.
Binance has pledged to cover all financial losses itself.
