{
  "id": 18009408,
  "title": "How $6,43 billion was stolen from Binance through fake interviews",
  "url": "https://urgent.news/2026/11/03/how-6-43-billion-was-stolen-from-binance-through-fake-interviews",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-11-03T19:32:27.000Z",
  "source": {
    "name": "Dev.to",
    "slug": "dev-to",
    "url": "https://dev.to/hacksgr/how-643-billion-was-stolen-from-binance-through-fake-interviews-34ai"
  },
  "original_language": "en",
  "account": "Binance revealed a massive $6.43 billion theft that resulted from a sophisticated multi-stage cyberattack targeting its internal infrastructure. The breach occurred through a series of coordinated actions, exploiting both technical vulnerabilities and social engineering tactics.\n\nIn June 2026, an engineer known as \"Engineer A\" inadvertently downloaded a trojanized Homebrew installer, which introduced a dangerous program into the company's wallet systems. While Binance promptly changed access keys and isolated the affected team, the breach exposed critical information to the attackers.\n\nA month later, in September 2026, the attackers shifted their focus to \"Engineer B.\" Through a deceptive recruitment process on a job search platform, Engineer B was lured into a series of deceptive interviews with individuals posing as HR and the company's CEO. The ultimate objective was to convince Engineer B to download a malicious code sample, which successfully compromised his computer.\n\nOn October 20, 2026, the perpetrators utilized Engineer B's compromised device, along with the access obtained from Engineer A, to infiltrate the company's internal AI tool. This enabled them to gain control over Engineer C, another team member. Between October 29 and 30, they leveraged stolen credentials from Engineer A to execute a malicious program, exploiting access to an internal transaction authorization service.\n\nThrough these actions, the attackers were able to execute unauthorized transfers and siphon off $6.43 billion in funds. In response, Binance took immediate action to contain the breach. By November 3, they had rebuilt the affected wallet system, updated their AI and access control systems, and replaced the compromised devices. The company also revoked old digital keys, conducted comprehensive security audits, and enhanced their ability to detect unusual behavior. Additionally, Binance is collaborating with law enforcement and security experts to track and freeze any stolen assets.",
  "summary": "Binance disclosed a record $6.43 billion theft resulting from a multi-stage campaign that combined a trojanized Homebrew installer, recruitment social engineering, and internal AI tool abuse to breach wallet infrastructure. As the company explained, this was not a simple isolated breach, but a series of planned actions that targeted its employees. How it all started in June It all started in June…",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 9,
    "also_reported_by": [
      {
        "outlet": "CNA - Business",
        "title": "Binance says hackers used fake job interview to compromise computer before $6.3 billion attack",
        "url": "https://urgent.news/2026/11/03/binance-says-hackers-used-fake-job-interview-to-compromise-computer",
        "published": "2026-11-03T14:51:53.000Z"
      },
      {
        "outlet": "Insurance Journal",
        "title": "Binance Hackers Used Fake Job Interviews in $6.3 Billion Heist",
        "url": "https://urgent.news/2026/11/03/binance-hackers-used-fake-job-interviews-in-6-3-billion-heist",
        "published": "2026-11-03T15:15:00.000Z"
      },
      {
        "outlet": "Gulf News",
        "title": "How fake job interviews helped hackers steal $6.34 billion from Binance",
        "url": "https://urgent.news/2026/11/03/how-fake-job-interviews-helped-hackers-steal-6-34-billion-from-binance",
        "published": "2026-11-03T18:38:10.000Z"
      },
      {
        "outlet": "Straits Times Business",
        "title": "Binance hackers used fake job interview in US$6.3 billion attack",
        "url": "https://urgent.news/2026/11/03/binance-hackers-used-fake-job-interview-in-us-6-3-billion-attack",
        "published": "2026-11-03T18:50:07.000Z"
      },
      {
        "outlet": "Dawn Business",
        "title": "Binance reveals hackers used fake job interviews, malicious code in $6.3bn heist",
        "url": "https://urgent.news/2026/11/03/binance-reveals-hackers-used-fake-job-interviews-malicious-code-in-6",
        "published": "2026-11-03T18:51:28.000Z"
      },
      {
        "outlet": "Guardian Business",
        "title": "Hackers behind $6.3bn Binance heist ‘used malware and bogus job interviews’",
        "url": "https://urgent.news/2026/11/03/hackers-behind-6-3bn-binance-heist-used-malware-and-bogus-job",
        "published": "2026-11-03T19:00:23.000Z"
      },
      {
        "outlet": "Wired",
        "title": "Binance Says Hackers Used Well-Known Tricks to Carry Out a $6.34 Billion Heist",
        "url": "https://urgent.news/2026/11/03/binance-says-hackers-used-well-known-tricks-to-carry-out-a-6-34",
        "published": "2026-11-03T19:04:58.000Z"
      },
      {
        "outlet": "The Hill",
        "title": "Binance says malicious code, fake job interview led to $6.3B hack",
        "url": "https://urgent.news/2026/11/03/binance-says-malicious-code-fake-job-interview-led-to-6-3b-hack",
        "published": "2026-11-03T21:44:38.000Z"
      }
    ]
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}