Binance Details Four-Month Path From Tainted Developer Install to $6.34 Billion Drain

Binance published its initial report on how attackers took about $6.34 billion in digital assets on Oct. 29, saying the intrusion began in June with a tampered software install and ran through a fake job interview in September. According to Binance, a wallet DevOps engineer downloaded a tampered Homebrew installation in June while searching for an AI coding tool. Binance spotted the compromise, gave him a new machine and reset his credentials, but the engineer and colleagues on the wallet infrastructure team had already been exposed to the attacker, Binance said.