North Korean state-backed hackers executed the largest cryptocurrency heist ever recorded, siphoning $6.3 billion from Binance in a meticulously planned operation involving fake job interviews and compromised employee credentials, the exchange revealed this week.
The Elaborate Cyber Heist
The attack, attributed to the North Korean cybercrime group TraderTraitor, unfolded over several months. It began in June 2026 when a Binance employee, referred to as “Engineer A,” unknowingly downloaded malware disguised as an AI coding tool. Though Binance’s security team detected the breach and replaced the compromised device, the hackers had already gathered critical insider information.
By September, the attackers escalated their efforts. A second employee, “Engineer B,” was lured into a fake hiring process through a legitimate job platform. After passing an initial interview with a fraudster posing as an HR repâusing stolen social media photos for credibilityâEngineer B was tricked into downloading malicious code during a follow-up call with a fake CEO.
The $6.3 Billion Blow
On October 29, the hackers struck. Using stolen credentials and an internal Binance AI tool, they drained billions from crypto wallets in just 20 minutes, scattering funds across global networks. Binance managed to freeze $2.8 billion of the stolen assets, but $3 billion remains unrecoverable.
The exchange immediately paused withdrawals and pledged full reimbursement for affected users. By Saturday, Binance had replenished 98% of lost tokens, though sourcing the remaining “less liquid” assets may take longer. To cover the losses, the company tapped over $6 billion from its reserves, including half of its $1 billion Secure Asset Fund for Users.
Fallout and Damage Control
Despite the breach, Binance maintains a strong financial position with $157 billion in total assets. However, the hack triggered $4.7 billion in customer withdrawals amid broader market turbulence. In a public statement, co-CEO Richard Teng acknowledged the severity of the incident: “This should not have happened, and we apologize for the concern, disruption and uncertainty it caused.”
The company has since implemented stricter security measures, including enhanced AI monitoring and rebuilt systems. North Korea, meanwhile, denied involvement, dismissing the allegations as a “grave political provocation” in state media.
Source: www.breitbart.com â https://www.breitbart.com/tech/2026/11/04/binance-north-korea-stole-6-3-billion-in-crypto-using-elaborate-fake-interview-scheme/