Binance Says Fake Hiring and Compromised AI Tool Led to $6.3 Billion Theft

Binance said a months-long attack using fake hiring and a compromised internal AI tool led to $6.3 billion in stolen assets from the exchange’s wallet infrastructure. The operation also involved tampered software packages, malicious coding tasks sent by people posing as recruiters and compromised employee computers. Binance said attackers used the access to obtain deployment credentials and penetrate wallet systems. On Oct. 29, attackers placed malware in wallet infrastructure and accessed Binance’s internal wallet-signing service, bypassing the exchange’s routine withdrawal process, Binance said. They used Ethereum’s EIP-7702 mechanism to make unauthorized transfers even after the exchange suspended withdrawals.