Binance Details Fake-Recruiting Attack in $6.3 Billion Incident

Binance said its investigation found attackers used a fake recruiting process to compromise an engineer and reach wallet infrastructure in an incident involving about $6.3 billion in digital assets. The attack began in June, when an engineer installed a tampered software package while setting up an AI development tool. In September, attackers posed as corporate recruiters and sent another engineer a malicious file disguised as a coding test, evading Binance’s security controls. On Oct. 20, attackers used compromised machines and Binance’s internal AI tools to reach two more engineers and obtain deployment credentials.