Binance publishes how $6.3 billion was taken: a laptop infected through a fake job interview and an internal AI tool served as the springboard to the signing systems

From a June foothold to the late-October transfers

According to the report, the attackers first targeted a Wallet DevOps engineer in June through a tampered Homebrew installation downloaded while installing an AI coding tool. Binance detected the anomaly, replaced the device and rotated credentials, but the exposure revealed the engineer's role and colleagues. In September another employee was lured through 'a fraudulent recruitment process, posing as company executives' into downloading a malicious coding assignment that infected his work computer.

On 20 October the attackers used that compromised machine and an internal AI tool to take control of two other engineers' devices, finding a container deployment permission on one. About nine days later they used the stolen credentials to deploy a container whose malicious script reached the wallet-signing systems and authorised the transactions. Binance says it has frozen or intercepted about $2.85 billion, replenished 98% of affected assets and reopened withdrawals in phases from 04:00 UTC on 3 November.

An internal AI tool became the instrument of lateral movement

Binance summarised the methods as 'social engineering by fake recruitment interviews, malicious software downloads, compromised internal AI tooling, endpoint compromise and an advanced transaction-authorisation method.' It has not disclosed what the AI tool was or how it was abused, but its role as the path from one infected device to other engineers' machines shows how the cross-cutting access of workplace AI becomes an attack surface. Remediation includes rebuilding the wallet system in a new environment, redesigning internal AI tools and access controls, replacing devices, decommissioning related credentials and tokens, expanding AI-based behavioural anomaly detection and commissioning an independent security review.

Co-CEO Richard Teng said 'this wasn't one mistake or one breach — it was a months-long campaign,' and that the company was publishing the full report 'because the lessons go far beyond Binance.' Binance also said it detected and prevented 57 suspected North Korea-linked attacks in 2026.

The FBI's attribution and Pyongyang's denial

On 31 October the FBI attributed the attack to TraderTraitor, a North Korean state-sponsored unit, saying law enforcement had observed the perpetrators converting stolen assets into ether and expecting further laundering through related technology. On 2 November Kim Yo Jong, sister of Kim Jong Un, rejected the FBI's claims as a 'grave political provocation,' and China's foreign ministry said the same day it was not aware of the situation. Attribution rests on the FBI's finding and private tracing (TRM Labs), set against Pyongyang's denial.