Binance Details Fake Job Interview and Malware in $6.3 Billion Crypto Theft
|
The Facts
- Binance said about $6.3 billion in cryptocurrency was stolen from its wallets on Oct. 29.
- Binance said the attack followed a months-long, multistage campaign.
- Binance said attackers used fake job interviews to induce an engineer to download malicious software.
- Binance said attackers compromised an internal AI tool to gain control of its wallet systems.
- The FBI attributed the theft to a North Korean hacking group.
- North Korea rejected the FBI's attribution of the theft.
- Binance said it would repay customers who lost funds in the attack.
Context
How did Binance say the attackers entered its systems?
Binance said attackers used social engineering through fake job interviews, persuaded an engineer to download malicious code, and later compromised an internal AI tool connected to wallet infrastructure. NYT BBC Washington Post NBC News
Who has been blamed for the theft?
The FBI attributed the attack to a North Korean hacking group. North Korea rejected the accusation. Guardian NBC News uol.com.br
What did Binance say about customers' losses?
Binance said it would repay customers who lost funds through the hack. NBC News Hindu Independent
Where Left and Right agree, and where they split
- Where Left and Right agree
- Both treat Binance's repayment pledge as necessary but insufficient, insisting that accountability for the breach must extend further than a payout.
- Where Left and Right split
- The left and the right split on whether Binance's security failure or the alleged North Korean theft deserves the reckoning.
- Why they won’t converge
- The divide is trust-in-institution: one reading treats Binance's internal account of the breach and its repayment pledge as sufficient oversight, the other treats attribution to a state actor as demanding accountability no exchange can deliver on its own.
How left and right read it
Ordinary customers' savings should never hinge on whether one engineer falls for a fake job interview, yet that is the exposure Binance describes: malicious software downloaded by an employee and a compromised internal AI tool that opened its wallet systems, with about $6.3 billion gone in a single day. A pledge to repay is welcome. But promises are not protections — make full reimbursement and real security standards enforceable.
“The theft is by far the largest in the history of the crypto industry, which has long been a target for hackers drawn to large pools of digital assets that can be moved across borders in minutes.” — The New York Times
When a hostile regime's operatives can take about $6.3 billion in a day, this is statecraft by theft, not a mere security lapse. The FBI attributed it to a North Korean hacking group, and Pyongyang's rejection of that finding changes nothing about the months-long campaign Binance describes — fake job interviews, malicious software, a compromised internal AI tool. Binance should make its customers whole. But who answers for the adversary?
The $6.3 billion is gone either way. The fight is over whether Binance or an accused nation-state owes the reckoning.
The receipts — 100 sources
Wire services (1)
Independent coverage (99)
The news, read by both sides.
The day’s biggest stories in one short brief, built to show both sides and the competing values behind the headlines. Free in your inbox.