Binance hack: Fake job assignment helped attackers reach wallet systems, exchange says

Binance says a fake recruitment assignment helped attackers gain access to employee computers before the October 29 hack. Its initial findings describe a campaign that eventually reached an internal service used to authorize wallet transactions, affecting approximately $6.34 billion in assets. The November 3 update expands Binance’s earlier account of a compromised engineer’s laptop. It also explains why suspending withdrawals failed to stop every transfer: attackers had established permissions on Ethereum that required separate action to revoke. A recruitment process concealed malicious software According to Binance, a software engineer was approached through a legitimate job-search platform in September.