Binance says fake job interviews used as part of $6.3bn crypto hack
The exchange says attackers used a recruitment approach and compromised systems before a major wallet theft.
TL;DR
- Binance said initial findings linked the theft of about $6.3 billion to fake job interviews and compromised systems.
- BBC and CNBC reported the exchange’s account of the attack and its initial response.
- The attack path described by Binance remains the company’s account; independent technical findings and attribution are not settled in these reports.
Binance said hackers stole about $6.3 billion in crypto assets after using fake job interviews to target an engineer. BBC reported that the exchange said malware from the process helped attackers compromise other engineers’ computers and access wallet-draining tools. [1] [2]
CNBC separately reported Binance co-CEO Richard Teng’s account that attackers used fake interviews and a compromised internal AI tool. The exchange described its findings as initial and said it was investigating the incident. [1] [2]
Binance said it had replenished most affected assets and suspended withdrawals during its response. Those details are attributed to the company; the cited reports do not provide an independent forensic reconstruction of the full attack. [1] [2]
The precise attack chain, scope of compromised systems and any external attribution remain open. A security review and further evidence will be needed to confirm how the theft occurred and what controls failed. [1] [2]
Why it matters
A large exchange breach can test custody controls and confidence in crypto infrastructure. The available reports describe the company’s preliminary account, while independent forensic confirmation remains outstanding.
Editor's note
Attribution and technical details are presented as Binance’s preliminary account; no investment advice.