Binance said hackers breached its wallet infrastructure through fake job interviews, malicious software and compromised internal AI tools, causing the Oct. 29 attack that drained more than $6 billion from the exchange. Co-CEO Richard Teng said the attackers spent months, including a fake developer tool in June and a coding test hiding malware in September. Binance says it has replenished 98% of the $6.34 billion in affected assets and is still purchasing more illiquid assets. Teng did not attribute the attack to North Korea but acknowledged the FBI has linked it to the TraderTraitor group, which is tied to North Korean hackers. Binance and partners such as Tether, Circle and Ripple reportedly froze about $3 billion, though some stolen funds continue to move through laundered channels.
Summary written by Upside AI from the original article. Read the source for full details.
Original headline: Binance co-CEO Richard Teng says hackers used fake job interviews, AI tool to steal $6.3 billion in crypto 108511116
Keywords
BNBUSDTBinancecryptocybersecurity
Open a keyword to see other news on the same topic.
Related tickers and likely impact
BNB/USDT
▼ Likely negativeBNB
Relevance: medium
| Market | Crypto |
|---|---|
| Exchange | Binance |
| Sector | Exchange tokens |
| Market cap | $92.9B |
| Close on 11/02/2026 | 699.25 |
| Change that session | -1.89% |
BTC/USDT
• NeutralBitcoin
Relevance: low
| Market | Crypto |
|---|---|
| Exchange | Binance |
| Sector | Layer 1 |
| Market cap | $1.6T |
| Close on 11/02/2026 | 76,816.00 |
| Change that session | -1.96% |
Impact is scored by AI from the headline and may be wrong. It is not investment advice.
Related news
- Binance’s $6.3 billion hack traced to an engineer looking for a new job
Binance’s initial report, published Nov. 3, says hackers posed as recruiters, invited an engineer to interviews, then sent a coding test containing zero-day malware that helped breach its wallet infrastructure. Earlier in June, an engineer installed a tampered Homebrew package while searching for an AI tool, and hackers later accessed the computers of two wallet engineers. On Oct. 29, attackers exploited Ethereum’s EIP-7702 feature to gain unauthorized transaction control over Binance’s hot wallet, and about $6.3 billion was stolen. Binance said it froze about $2.85 billion in related assets, restored 98% of affected tokens, and asserted users suffered no financial losses. The FBI linked the attack to the TraderTraitor group tied to North Korea, but Kim Yo Jong denied the accusation.
- Binance hack drained wallets backing customer assets, reserve data shows
- Binance hack may involve private key 'misuse,' not theft: Blockaid CEO
Blockaid CEO Ido Ben-Natan preliminarily assesses that attackers may have manipulated Binance's transaction-signing infrastructure rather than stealing private keys, with similarities to the February 2025 Bybit hack. In Blockaid's onchain analysis, the attacker bundled 50 EIP-7702 authorizations into one transaction targeting Binance 14, delegating the affected account to an unverified sweeper contract. Binance has not confirmed the method used to steal over $2.5 billion in crypto, which is described as the largest crypto hack in history. Ben-Natan said the activity may have involved multiple compromised devices, though this is unconfirmed, and its sophistication resembles operations linked to North Korean attackers.
- South Korea's president says country needs a ‘cybersecurity czar’ following $6.3 billion Binance hack
- Binance traces $6.3B hack to fake job interviews, compromised AI tool
Binance's postmortem says the attackers spent months inside its systems, starting with a tampered package an engineer installed while setting up an AI coding tool. Later, fake recruiters tricked another engineer into running a malicious file disguised as a coding assignment, and the hackers used the compromised machines to gain deployment credentials and plant malware in the wallet infrastructure on October 29. They then accessed the wallet-signing service to move funds outside normal withdrawals, and exploited Ethereum's EIP-7702 to keep unauthorized transfers going after withdrawals were suspended. About $6.3 billion was affected, with $2.85 billion frozen or intercepted, and Binance said it would absorb the losses and had replenished 98% of affected token assets as of October 31. The FBI attributes the attack to North Korean hackers, which Kim Yo Jong, sister of Kim Jong Un, denied.
- Mid-term facts & refrigerator hacks, tech sell-off continues, Binance CEO addresses issues
Yahoo Finance Executive Editor Brian Sozzi recaps the day's top stories, including why Palantir (PLTR) is not escaping the AI rout, why Disney (DIS) is poised to cut jobs, and how Apple's (AAPL) earnings turned into a dull day for John Ternus and company. He also interviews Binance CEO and founder Changpeng Zhao about roughly $6.3 billion in digital assets drained from Binance on Oct. 29 due to a hack.
Related markets
Latest news
- CoreWeave's 15% Bond Yield Is a Warning for AI Debt. Here Are the Stocks Most Exposed.
CoreWeave, an AI infrastructure “neocloud” provider, has grown rapidly: revenue rose from $16 million in 2022 to $5.13 billion in 2025, while its net loss widened to $1.17 billion. To fund expansion, the company has issued more shares and taken on more debt, ending the second quarter of 2026 with $72 billion in total liabilities. The average yield to maturity on its senior unsecured bonds is 14.1% to 15.6%, and interest payments consume roughly a quarter of its revenue, so debt pressure could grow if the Federal Reserve keeps raising rates. Most of its senior notes trade at about $0.80 on the dollar. Compared with Nebius and IREN, CoreWeave is considerably more leveraged.
- Netflix Trades at a Discount to the S&P 500's Valuation. Is It Deserved?
Netflix, the world's largest premium video streaming service with more than 300 million paying subscribers, trades at 19 times trailing earnings and 16.5 times next year's expected profit, while the S&P 500 trades at 25 times and 18 times. The stock has fallen 54% from its all-time high in June of last year, revenue growth has slowed for three straight quarters, and shares initially fell after each of the last six earnings reports, alongside layoffs. The author notes the stock fell roughly 80% in the 2011 and 2022 downturns before rebounding more than fivefold, while analysts still expect low-double-digit revenue growth. The author calculates that the stock trades below 14 times earnings for 2028 and 12 times for 2029, respectively. The author, a longtime shareholder, argues the discount to the S&P 500 is not warranted.
- What information must crypto asset trading platforms in Vietnam disclose? A notable deadline has just been set
Circular 165/2026/TT-BTC, issued by the Ministry of Finance on 31/10/2026 and effective from 18/12/2026, guides reporting and disclosure rules for the pilot crypto asset market. Service providers must publish daily trading information on their websites, including at least 3 best bid and ask prices remaining after order matching with corresponding volumes, and the trading value of foreign investors. They must also report to the State Securities Commission by 15:00 each day and report IT incidents within 24 hours. Issuers must disclose offering results within 7 days after the offering closes, and listing or trading suspensions must be announced at least 7 days in advance. Information must be published in both Vietnamese and English, with Vietnamese prevailing in case of discrepancies, and retained for at least 10 years.
- Vietnam needs 1,000 aircraft over the next 20 years
Airbus forecasts that Vietnam's air passenger traffic could grow an average of 7.7% a year over the next 20 years, twice the global average, requiring about 1,000 additional aircraft beyond the existing fleet. Vietnamese airlines currently operate about 230 Airbus aircraft and have more than 220 more on order, with Airbus holding roughly 90% of the narrow-body market. As of September 2026, Vietnam had 258 aircraft registered to 13 operators, 231 of them in commercial service. In 2026, Vietravel Airlines ordered 50 narrow-body aircraft and Vietjet ordered 40 A330-900s. Airbus also says it will support Vietnam's aerospace workforce development and the VNREDSat-2 satellite program.
- Meet the Dividend Stock That Warren Buffett Backed for Decades. Here's Why Greg Abel Is Still Holding.
Berkshire Hathaway's stock rose 5,502,284% during Warren Buffett's 56-year tenure, compared with 39,054% for the S&P 500. Coca-Cola (KO) is Berkshire's longest-held stock and has raised its dividend for 64 straight years, one of the best track records among Dividend Kings. Berkshire spent $1.3 billion buying Coca-Cola shares over several years ending in 1988, and it still owns 400 million shares without ever selling any, making up 10.4% of the portfolio as its third-largest position. With an annual dividend of $2.12, Berkshire is on track to collect $848 million from Coca-Cola's dividend this year alone. KO shares are up 37% this year versus 12% for the index, as third-quarter revenue rose 7% and operating income climbed 12%, lifting operating margin to 33.4% from 32%.
- Epidemic of Hacked Freezers Spreads Across Europe
In France, about 700 of 10,000 supermarkets were affected in October, and nine more countries reported refrigeration problems on Monday. France's CERT-FR links the compromises to remote controllers made by Danfoss and Copeland, and no group has claimed responsibility. Hackers forced a continuous defrost cycle, spoiling food and sparking fires at some stores, while units in Estonia were pushed to 50°C (122°F). Groupement Mousquetaires counted 300 affected stores, and Cooperative U said 80 of its 2,000 shops were hit. CERT-FR warns the campaigns are probably still ongoing, and Italy's government was set to hold a cybersecurity meeting on Tuesday.
Get the briefing on Telegram or Zalo
Join the Upside Telegram channel or Zalo group for the Vietnam stocks and gold briefing at 8:00 and 19:00 (Vietnam time) on trading days, plus a weekly wrap on Saturday morning.