Binance Traces Wallet Attack to Fake Interview and AI Tool Abuse

Binance’s preliminary investigation traces an intrusion into its wallet infrastructure to a fake job interview, malicious code and misuse of an internal AI tool, detailing a path into its wallet-signing systems. The findings trace the initial compromise to September, when an engineer downloaded a project containing malicious code during a fake job interview. On Oct. 20, attackers used the compromised computer and an internal AI tool to gain access to other wallet engineers’ systems. On Oct. 29, attackers used stolen credentials to deploy malicious containers and reach Binance’s internal wallet-signing service.