Attackers penetrated internal infrastructure by deceiving engineers with bogus recruitment processes and deploying malicious files between June and October. They subsequently manipulated an internal artificial intelligence tool to seize control of multiple developer systems. Using stolen credentials and a custom script, the perpetrators drained the company's active hot wallets on 29 October. The platform has since recovered $2.85 billion of the assets while issuing a public apology to users.
Key points
Attackers successfully bypassed institutional defenses by targeting staff through social…: Attackers successfully bypassed institutional defenses by targeting staff through social engineering scams on external platforms.
Automated hot wallets suffered catastrophic losses after hackers obtained developer crede…: Automated hot wallets suffered catastrophic losses after hackers obtained developer credentials and executed unauthorized scripts.
Federal investigators attributed the multi-billion-dollar breach directly to state actors…: Federal investigators attributed the multi-billion-dollar breach directly to state actors in North Korea.
Sources checked by our analysis pipeline: 1
The hackers behind the $6.3bn (£4.7bn) Binance heist used bogus job interviews, malicious software and an internal AI tool, the company has revealed.
The world’s largest cryptocurrency exchange was compromised in an operation that began with an inadvertent download of malware in June, led to a recruitment scam in September and then a raid last week of “hot wallets” where billions of dollars worth of crypto-assets were taken.
The FBI has blamed North Korea for last week’s heist but Pyongyang, a prolific crypto-hacker, described the accusation as “absurd rhetoric” on Tuesday.
According to an update Binance released on Tuesday, the hackers got their first foothold in the summer when a company engineer inadvertently downloaded malware that exposed the employee’s role and that of others in the team that looked after Binance’s cryptowallet infrastructure.
A fake project director then contacted a different engineer on a legitimate job-hunting platform, leading to a first-round video interview with a sham HR representative and a second-round interview – on a chat app – with the “chief executive” of a fictitious company. It was during the…
Apple is testing new Audio Intelligence capabilities designed to act as factual memory aids rather than commercial assistants. Currently restricted to developer betas on the newest smartwatches, the system focuses strictly on recent speech transcription and conversation recaps without incorporating emotional analysis or purchasing prompts. This approach emphasizes user privacy controls, requiring explicit opt-ins and hardware-based calibration before any audio capture occurs.
Finic has launched an alternative to established risk tools like Sardine and Sift by providing an open-source engine for real-time transaction screening. The software allows developers to automate complex fraud workflows and model deployments directly through AI coding agents. This provides organizations with transparent, self-hosted infrastructure to evaluate critical user activities without relying on proprietary black-box vendors.
Continuous integration setups now allow teams to bypass creating placeholder deployments simply to test code changes. Developers can activate automated testing workflows straight from their local terminal, provided their accounts are properly connected and hold the appropriate repository permissions. This change removes previous administrative friction by letting builds run immediately upon code updates.