Finance

Binance: Fake Job Interviews Fueled $6.3B Crypto Heist

Is AI hacking panic overblown with old-school deception to blame or is AI scaling attacks faster than defenses can keep up?

4 hours ago·Updated 1 hour ago

Binance: Fake Job Interviews Fueled $6.3B Crypto Heist

Story

Above: A photo illustration of the Binance logo displayed on a smartphone. Image credit: Dan Kitwood/Getty Images

The Facts

Binance announced on Tuesday that the hackers who stole $6.3 billion from the cryptocurrency exchange used fake recruitment interviews, malicious software downloads and a compromised internal AI tool in what it called a "serious and highly sophisticated security incident."
Binance on X
Financial Times
BBC News
On X, Binance said the hacking campaign began in June, when a Binance engineer downloaded a tampered software tool through a search engine. Binance detected the anomaly and replaced the device. However, the engineer's role and those of his wallet team colleagues were exposed.
Binance on X
In September, an individual posing as a project director contacted a second engineer on a job-hunting platform. The engineer was then interviewed by a purported HR representative and the CEO of a fictitious company before downloading an assignment that concealed malicious code onto his work computer.
Binance on X
On Oct. 20, the attackers used the compromised device and an internal AI tool to gain control of two other engineers' systems. Nine days later, a malicious script launched the raid, which removed 233.46 million XRP from five hot wallets in roughly four minutes.
Binance on X
Binance stated it has set aside more than 100% of the funds needed to refund the loss and had already replenished 98% of the affected tokens by Saturday. The company also said it will undertake a cybersecurity review, expand investment in AI security and establish a security research fund.
Binance on X
Culpability for the incident has been attributed to North Korea, with the FBI stating on Saturday that it had been carried out by a hacking group known as "TraderTraitor." Kim Yo-jong, sister of leader Kim Jong Un, called the accusation "absurd rhetoric" on Tuesday, according to the state agency KCNA.
Federal Bureau of Investigation
KCNA Watch

Sources Split

LEFT

CENTER

RIGHT

ESTAB
CRIT

CENTER

PRO
ESTAB

The Spin

Narrative A

While the hack was undeniably complex and serious, Binance has taken steps to prevent a repeat. It has not only rebuilt affected systems and implemented other protective measures, but will also utilize AI for security. The technology, after all, represents the forefront of cyber defense and will help outfits like Binance stay on the front foot against hostile actors.

Lawfare Blog

Binance on X

Narrative B

Rather than an outlier, the Binance hack signals the beginning of a new era of AI-powered super hacks. Cheap models now write slicker lures, fake colleagues and churn out malware, dropping the skill barrier for thieves and state-backed crews alike. Companies and nations can peddle all the quick fixes they like; it will not be enough.