Binance Confirms Fake Job Interviews Used in $6.3 Billion Crypto Hack

Binance, the world's largest cryptocurrency exchange, has disclosed that a massive security breach resulting in the loss of $6.3 billion was facilitated by a highly sophisticated multi-stage campaign. While many users often search for Binance news to understand the platform's stability, this incident highlights the growing risks of social engineering in the digital asset sector.

According to the company, attackers targeted its engineers using deceptive tactics, including a fake recruitment process. One engineer was contacted via a legitimate job-hunting platform for bogus interviews. To build trust, the perpetrators shared social media profiles containing personal images. During a follow-up interview, the engineer was instructed to download a file presented as an assignment, which contained malware designed to bypass security detection.

Hackers stole $6.3 billion from Binance using fake job interviews and compromised internal AI tools.

Once the engineer's computer was compromised, the hackers leveraged an internal AI tool to gain control over the laptops of two other engineers. This access allowed them to drain the exchange's wallets of billions of dollars in cryptocurrency. Binance described the event as a serious security incident and issued a formal apology for the disruption caused to its global user base.

Following the breach, Binance suspended all withdrawals, preventing customers from accessing their funds until the service was restored. The company has since worked with law enforcement, including the FBI and the US Secret Service, to trace and freeze the stolen assets. Binance confirmed that it has set aside funds to cover the losses and has replenished 98% of the impacted token assets as of Saturday.

Attribution of the Attack

While Binance previously withheld comment on potential perpetrators, it recently confirmed that the FBI has identified the Democratic People's Republic of Korea as the party responsible for the incident. This aligns with findings from various cyber analysts who noted that the breach mirrors previous attacks attributed to the Lazarus Group, also known as the TraderTraitor unit, which was blamed for a $1.5 billion hack of Bybit in 2025. North Korean officials have denied these allegations, characterizing them as a sinister attempt by the US to damage the country's reputation.

Security Enhancements

In response to the hack, Binance has committed to increasing its investment in AI-driven threat detection and will engage third-party cyber experts for a comprehensive security review. The company also plans to establish a security research fund to collaborate with leading firms on new defensive initiatives.

Why it matters

This incident underscores the extreme vulnerability of even the largest financial platforms to targeted social engineering. For investors and users globally, the breach highlights the importance of rigorous security protocols when interacting with digital platforms. While Binance has taken steps to replenish assets, the event serves as a stark reminder of the evolving threats in the cryptocurrency landscape.