Attackers infiltrated the world's largest cryptocurrency exchange by tricking an engineer on a legitimate hiring platform into downloading malware disguised as an employment test. The perpetrators then exploited internal AI systems to pivot across employee machines and drain digital wallets of $6.3 billion. Binance briefly halted withdrawals and subsequently replenished 98% of the impacted token assets while maintaining sufficient reserves to cover all losses. The company is actively collaborating with U.S. federal agencies to locate and freeze the missing funds.
Key points
Binance has set aside more than 100% of the capital needed to cover all user losses cause…: Binance has set aside more than 100% of the capital needed to cover all user losses caused by the cyberattack.
Pyongyang denied involvement in the multi-billion dollar cryptocurrency theft and critici…: Pyongyang denied involvement in the multi-billion dollar cryptocurrency theft and criticized the allegations from the United States.
The company plans to expand threat-detection investments and hire external cybersecurity…: The company plans to expand threat-detection investments and hire external cybersecurity experts to conduct an exhaustive security review.
Sources checked by our analysis pipeline: 1
- Published
Hackers who stole a record $6.3bn (£4.7bn) from Binance used fake job interviews and a compromised internal AI tool, the firm has revealed.
Initial findings published by the company, which operates the world's largest cryptocurrency exchange, said hackers gained access to its systems through "sophisticated, multi-stage campaign".
It said they used a range of techniques such as malicious software downloads to compromise the computers of Binance engineers and gain control over tools to drain its wallet of billions of dollars worth of crypto.
Binance called it a "serious and highly sophisticated security incident" and apologised, saying "this should not have happened".
"We apologise for the concern, disruption and uncertainty it caused our users, partners and the wider industry," it said.
The company added it had taken a range of steps following the incident, including working with law enforcement to trace and freeze affected assets.
It said it had also set aside more than 100% of the funds needed to cover the loss, noting 98% of the token assets impacted had been "replenished" as of Saturday.
Rapid momentum across business correspondent and lending solutions helped propel the company to a historic quarterly top line, supported by steady application counts in consular processing. However, sustained equity declines over the past two years have overshadowed solid operational improvements. Investors are watching closely to see if accelerated digital adoption and automation initiatives can finally reverse the extended share price drawdown.
Market participants in the Nordic region saw regional equities secure modest advances by the final bell. The trading day concluded with equities in Denmark maintaining positive momentum through the close of session. This upward movement reflects steady market sentiment as trading activity wrapped up across the local exchange.
Federal investigators have traced a massive October 29 cyberattack against the cryptocurrency exchange to North Korean operators associated with the TraderTraitor group. The multi-month infiltration breached wallet transaction authorization systems by compromising internal personnel and systems. Binance has tapped corporate reserves to replace the vast majority of lost balances while coordinating an industrywide freeze on stolen funds.