News about BNBUSDT

Binance said hackers breached its wallet infrastructure through fake job interviews, malicious software and compromised internal AI tools, causing the Oct. 29 attack that drained more than $6 billion from the exchange. Co-CEO Richard Teng said the attackers spent months, including a fake developer tool in June and a coding test hiding malware in September. Binance says it has replenished 98% of the $6.34 billion in affected assets and is still purchasing more illiquid assets. Teng did not attribute the attack to North Korea but acknowledged the FBI has linked it to the TraderTraitor group, which is tied to North Korean hackers. Binance and partners such as Tether, Circle and Ripple reportedly froze about $3 billion, though some stolen funds continue to move through laundered channels.

Binance’s initial report, published Nov. 3, says hackers posed as recruiters, invited an engineer to interviews, then sent a coding test containing zero-day malware that helped breach its wallet infrastructure. Earlier in June, an engineer installed a tampered Homebrew package while searching for an AI tool, and hackers later accessed the computers of two wallet engineers. On Oct. 29, attackers exploited Ethereum’s EIP-7702 feature to gain unauthorized transaction control over Binance’s hot wallet, and about $6.3 billion was stolen. Binance said it froze about $2.85 billion in related assets, restored 98% of affected tokens, and asserted users suffered no financial losses. The FBI linked the attack to the TraderTraitor group tied to North Korea, but Kim Yo Jong denied the accusation.

Blockaid CEO Ido Ben-Natan preliminarily assesses that attackers may have manipulated Binance's transaction-signing infrastructure rather than stealing private keys, with similarities to the February 2025 Bybit hack. In Blockaid's onchain analysis, the attacker bundled 50 EIP-7702 authorizations into one transaction targeting Binance 14, delegating the affected account to an unverified sweeper contract. Binance has not confirmed the method used to steal over $2.5 billion in crypto, which is described as the largest crypto hack in history. Ben-Natan said the activity may have involved multiple compromised devices, though this is unconfirmed, and its sophistication resembles operations linked to North Korean attackers.