Binance traces $6.3B hack to fake job interviews, compromised AI tool
Summary
Binance said a months-long cyberattack began with malware targeting employees and culminated in attackers compromising its wallet infrastructure and internal signing service on Oct. 29. Stolen deployment credentials enabled unauthorized transfers, while exploitation of Ethereum’s EIP-7702 wallet permissions helped transfers continue after withdrawals were suspended. Binance reported $6.3 billion in affected assets, of which $2.85 billion was frozen or intercepted; it said it would absorb losses and had replenished 98% of affected tokens by Oct. 31. The FBI attributed the attack to North Korean hackers, a claim denied by Kim Yo Jong.
